The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1.
- https://wpvulndb.com/vulnerabilities/9458
- https://github.com/20142995/nuclei-templates