Patch Ticker

WP Booking System plugin XSS vulnerability

Malicious scripts can be planted on WordPress booking plugin pages.

Summary

A reflected XSS flaw in the WP Booking System WordPress plugin lets an attacker run malicious scripts in a visitor's browser. Versions up to and including 2.1.0.6 are affected.

What to do

Update to version 2.1.0.7 or newer.

Products and platforms

  • WP Booking System

CVE IDs

Sources

Times

First published

First seen