Wpbookingsystem Wp Booking System
5 CVEs affecting Wpbookingsystem Wp Booking System. Latest disclosed: 2024-09-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12239 | High | 7.2 | 2019-05-20 | The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrati… |
CVE-2024-8797 | Medium | 6.1 | 2024-09-14 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_ar… |
CVE-2017-2168 | Medium | 6.1 | 2017-05-22 | Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows rem… |
CVE-2023-24402 | Medium | 5.9 | 2023-04-07 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin <= 2.0.18 versions. |
CVE-2021-25061 | Medium | 5.4 | 2022-01-17 | The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page. |