Advisories · Technology
WP Booking System.
Every CVE that names WP Booking System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' Parameter
- WP Booking System
- Cross-site scripting (XSS)
- CVSS 8.8 High
WP Booking System < 2.1.0.1 - Unauthenticated Stored XSS via X-Forwarded-For Header
- WP Booking System
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress WP Booking System plugin < 5.12.8.1 - Broken Access Control vulnerability
- WP Booking System
- Broken access control