WordPress Booking Package plugin <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter vulnerability

Reflected Cross-Site Scripting via Locale Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin Booking Package versions = 1.6.72...