CVE-2026-16063
CVE-2026-16063
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before storing it and rendering it on the public event page, allowing u…
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)