A vulnerability classified as problematic was found in Smart Appointment & Booking Plugin up to 1.0.7 on WordPress. Affected by this issue is the function
saab_save_form_data. Such manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2026-0742. The attack can be executed remotely. There is not any exploit available.
