The Appointment Hour Booking WordPress plugin prior to 1.3.17 does not properly sanitize values used when creating new calendars.
dwbooster appointment hour booking