Medium severity4.7NVD Advisory· Published May 27, 2024· Updated Jun 17, 2026

CVE-2024-35297

Description

Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/wp-easybookingreferences
WordPress/WP Bookingllm-create
Range: <2.4.5

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN35838128/nvd
plugins.trac.wordpress.org/changesetnvd
wordpress.org/plugins/wp-easy-booking/nvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000