Sign In Scheduling Online Appointment Booking System
Sign In Scheduling Online Appointment Booking System has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Sign In Scheduling Online Appointment Booking System has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ngô Thiên An (ancorn_). Sign In Scheduling Online Appointment Booking System is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.
CVE-2023-4917310to8 Online Appointment Booking System <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Read the full analysisVulnerability Records

Sign In Scheduling Online Appointment Booking System
Author
Sign In Scheduling (formerly 10to8)
Sign In Scheduling is an all-in-one appointment scheduling & online booking system with a free & easy-to-use WordPress plugin. Sign In Scheduling will help you run your business more efficiently by allowing your clients to book and manage their own appointments without interrupting you with phone calls. Rid your business of wasted time spent on admin. Reduce no-shows by up to 90% with automated appointment reminders sent via SMS & email. Remind clients and staff alike of their upcoming appointments, eliminate confusion and provide better customer experience. Benefit from many more unrivaled features such as the 2-way client chat, live calendar sycn with iCal, Google and Outlook, and integrate Sign In Scheduling with over 500 apps. Use the [10to8booking] short tag on any page with the options described in the documentation to embed your customized booking flow. Create your free account in just minutes: 10to8.com Documentation This creates the [10to8booking] tag to embed Sign In Scheduling into the page. Usage: [10to8booking organisation_id=”XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX”] Once you’ve signed up for a free account at 10to8.com you will be given your organization ID, a 30-character code, to paste into the [10to8booking] tag. If you have an existing Sign In Scheduling account, you can find your ID by navigating to “Online Booking > WordPress Widgets” in the application We recommend adding the tag in text mode instead of visual mode to prevent other formatting of the URL being inadvertently added. Support is available at http://support.10to8.com/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C