← Back to Dashboard

CVE-2026-109147

HIGH NVD
CVSS Score
7.1
Severity
HIGH
Source
NVD
Published
Oct 21, 2026
Description

The WP Booking System WordPress plugin before 2.1.0.3 does not validate and escape one of its parameters before reflecting it back in an admin page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators.

View Full Details ← Back