Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS

Proof of Concept

* Open the Appointment Hour Booking Tab.
* Enter XSS payload  like "><script>alert(document.location)</script> in new calendar name field. and click on "add new" button.
* Go back to the Appointment Hour Booking Tab and select "Publish" for any calendar.
* The XSS payload will trigger on this page.