high7.1
CVE-2026-39447
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions.
Impact
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions.
Affected products
| Product | Affected versions |
|---|---|
| Simply Schedule Appointments | through 1.6.10.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.