CVE-2024-35297

Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

CVE-2024-35297

The WP Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.4.4 . This issue stems from insufficient input sanitization and output escaping , allowing authenticated attackers to inject arbitrary web scripts into pages. These scripts...