← All advisories

Unrated severityNVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026

WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

CVE-2026-59558

Description

Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions.

Affected products

1

WordPress/Booking Calendarllm-fuzzy
Range: <=11.4.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/booking/vulnerability/wordpress-booking-calendar-plugin-11-4-2-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.