CVE-2024-35297

Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

CVE-2024-35297

CVE-2024-35297 affects WP Booking (WP Easy Booking) and is an authenticated, stored cross-site scripting vulnerability in the WP Booking plugin. Public details indicate versions prior to 2.4.5 are affected, with evidence of stored XSS that could execute arbitrary scripts in a user’s browser when ...