CVE-2024-12469

🗓️ 17 Dec 2024 09:22:42Reported by WordfenceType

Vulnerability in WP BASE Booking plugin allows Cross-Site Scripting via status parameter in version 4.9.1.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-12469	17 Dec 202409:31	–	circl
CNNVD	WordPress plugin WP BASE Booking of Appointments, Services and Events 跨站脚本漏洞	17 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-12469 WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter	17 Dec 202409:22	–	cvelist
EUVD	EUVD-2024-50881	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12469	17 Dec 202410:15	–	nvd
Patchstack	WordPress WP BASE Booking plugin <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter vulnerability	16 Dec 202422:25	–	patchstack
Positive Technologies	PT-2024-17608 · WordPress · Wp Base Booking Of Appointments	17 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12469	23 May 202506:18	–	redhatcve
Vulnrichment	CVE-2024-12469 WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter	17 Dec 202409:22	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Vulners

Node

puckrobin wp_base_booking_of_appointments,_services_and_eventsRange≤4.9.1wordpress

[
  {
    "vendor": "puckrobin",
    "product": "WP BASE Booking of Appointments, Services and Events",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.9.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/eb6613ad-1fb2-4278-adc1-fe5d1ade3ad5
plugins	www.plugins.trac.wordpress.org/changeset/3207855/
wordpress	www.wordpress.org/plugins/wp-base-booking-of-appointments-services-and-events/

15 Apr 2026 00:35Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.02784

SSVC

CWE-79