medium4.7
CVE-2024-35297
Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5.
Impact
Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product.
Affected products
| Product | Affected versions |
|---|---|
| WP Booking | before 2.4.5. |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/jp/JVN35838128/
- https://plugins.trac.wordpress.org/changeset?new=3084990%40wp-easy-booking%2Ftrunk%2Fview%2Ffrontend%2Fbooking-locations.php&old=2404687%40wp-easy-booking%2Ftrunk%2Fview%2Ffrontend%2Fbooking-locations.php
- https://wordpress.org/plugins/wp-easy-booking/
- https://jvn.jp/en/jp/JVN35838128/
- https://plugins.trac.wordpress.org/changeset?new=3084990%40wp-easy-booking%2Ftrunk%2Fview%2Ffrontend%2Fbooking-locations.php&old=2404687%40wp-easy-booking%2Ftrunk%2Fview%2Ffrontend%2Fbooking-locations.php
- https://wordpress.org/plugins/wp-easy-booking/