WordPress WebHotelier plugin <= 1.6.0 - Reflected Cross-Site Scripting (XSS) vulnerability

2021-08-0900:00:00

WPScanTeam

patchstack.com

Reflected Cross-Site Scripting (XSS) vulnerability discovered by iohex and WPScanTeam in WordPress WebHotelier plugin (versions <= 1.6.0).

Solution

           Update the WordPress WebHotelier plugin to the latest available version (at least 1.6.1).

CPENameOperatorVersion
webhotelierle1.6.0

CPE	Name	Operator	Version
	webhotelier	le	1.6.0

wordpress.org/plugins/webhotelier/

wpscan.com/vulnerability/a88ffc42-6611-406e-8660-3af24c9cc5e8