← All advisories

Medium severity5.4NVD Advisory· Published Jan 17, 2022· Updated Jun 17, 2026

CVE-2021-25061

CVE-2021-25061

Description

The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wpbookingsystem/Wp Booking System
cpe:2.3:a:wpbookingsystem:wp_booking_system:*:*:*:*:*:wordpress:*:*
Range: <2.0.15
WordPress/Wp Booking Systemcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.0.15
Package: https://wordpress.org/plugins/wp-booking-system

Patches

Vulnerability mechanics

References

2

plugins.trac.wordpress.org/changeset/2643776/wp-booking-systemnvdPatchVendor Advisory
wpscan.com/vulnerability/bd9dc754-08a4-4bfc-8dda-3f5c0e070f7envdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.