CVE-2023-24402

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin <= 2.0.18 versions.

Score

CVSS 3.1 5.9 Medium

Status

Modified - audit@patchstack.com

Published

2023-04-07

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Wp Booking System Booking Calendar (Veribo Roland Murg)
• Wp Booking System (Wpbookingsystem)

References

• https://patchstack.com/database/vulnerability/wp-booking-system/wordpress-wp-booking-system-booking-calendar-plugin-2-0…