The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phone Number, or Website.
cxsecurity.com/issue/WLB-2019120110
cxsecurity.com/issue/WLB-2019120111
cxsecurity.com/issue/WLB-2019120112
themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727
themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622
themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571
wpvulndb.com/vulnerabilities/10013
wpvulndb.com/vulnerabilities/10014
wpvulndb.com/vulnerabilities/10018