Beds24 Online Booking < 2.0.25 - Contributor+ Stored XSS

2024-01-1500:00:00

wpscan.com

beds24 online booking

plugin

version 2.0.25

contributor+

stored xss

cross-site scripting

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

References

patchstack.com/database/vulnerability/beds24-online-booking/wordpress-beds24-online-booking-plugin-2-0-23-cross-site-scripting-xss-vulnerability