65 matches found
WP BASE Booking - Reflected XSS
WP BASE Booking of Appointments, Services and Events WordPress plugin 5.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to...
CVE-2024-12558
CVE-2024-12558 WP BASE Booking of Appointments, Services and Events history.pushState'', '', '/'; document.forms0.submit;...
CVE-2026-73402
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
EUVD-2026-63310
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-73402 WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-73402
WP BASE Booking (a WordPress plugin for managing appointments, services, and events) versions ≤ 6.3.2 are affected by a Subscriber Cross-Site Scripting (XSS) vulnerability. The flaw requires low privileges and user interaction , with a changed scope indicating cross-origin impact. CVSS 3.1 base s...
WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by moonge in WordPress Plugin WP BASE Booking versions = 6.3.2...
CVE-2026-73402: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
PT-2026-78983
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-61962
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
CVE-2026-61962 WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
CVE-2026-61962 WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
CVE-2026-61962
WP BASE Booking (WordPress plugin) versions
CVE-2026-61962
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
EUVD-2026-57969
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
CVE-2026-61962: Improper Control of Generation of Code
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
PT-2026-71535
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
Arbitrary Code Execution vulnerability discovered by buitu in WordPress Plugin WP BASE Booking versions = 6.3.0...