The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.