Reflected XSS Vulnerability in Bookly Appointment Booking Tool by Bookly
CVE-2026-32540
7.1HIGH
What is CVE-2026-32540?
A reflected XSS vulnerability exists in the Bookly Responsive Appointment Booking Tool, primarily impacting versions up to 26.7. The flaw arises from improper sanitization of user inputs during web page generation. Attackers can exploit this vulnerability by crafting a malicious URL. When unsuspecting users click on the link, their browsers execute harmful scripts, potentially leading to data theft, session hijacking, or unwanted actions performed on behalf of the user. It is essential for users of affected versions to implement patches or updates to mitigate these risks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Bookly <= n/a