PT-2024-26421 · Unknown · Wp Booking

Daiki Sato · Published 2024-05-27 · Updated 2024-11-08 · CVE-2024-35297

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP Booking versions prior to 2.4.5

Description A cross-site scripting issue exists, allowing an arbitrary script to be executed on the user's web browser if exploited.

Recommendations For versions prior to 2.4.5, update to version 2.4.5 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-35297

Affected Products

Wp Booking

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-35297 · Security Note
• https://wordpress.org/plugins/wp-easy-booking · Note
• https://t.me/cvenotify/81065 · Telegram Post
• https://t.me/cvenotify/101105 · Telegram Post
• https://jvn.jp/en/jp/JVN35838128 · Note
• https://plugins.trac.wordpress.org/changeset?new=3084990%40wp-easy-booking%2Ftrunk%2Fview%2Ffrontend%2Fbooking-locations.php&old=2404687%40wp-easy-booking%2Ftrunk%2Fview%2Ffrontend%2Fbooking-locations.php · Note