CVE-2022-29443

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin <= 3.0 at WordPress.

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2022-06-15

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Hotel Booking (Nicdark)
• Hotel Booking Wordpress Plugin (Nicdark)

References

• https://patchstack.com/database/vulnerability/nd-booking/wordpress-hotel-booking-plugin-3-0-multiple-authenticated-stor…
• https://wordpress.org/plugins/nd-booking/