CVE-2025-22684: Hakan Ozevin WP BASE Booking, XSS

Описание

Оригинално описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hakan Ozevin WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Stored XSS.This issue affects WP BASE Booking: from n/a through <= 5.0.0.

Засегнати продукти

• Hakan Ozevin WP BASE Booking: до 5.0.0

Вид слабост

• CWE-79 XSS

История

Други уязвимости в Hakan Ozevin WP BASE Booking

• 8.8CVE-2026-118086
• 6.5CVE-2026-73402
• 10.0CVE-2026-61962
• 8.8CVE-2026-59541
• 8.1CVE-2026-39587

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-22684
• https://nvd.nist.gov/vuln/detail/CVE-2025-22684
• https://patchstack.com/database/Wordpress/Plugin/wp-base-booking-of-appointments-services-and-events/vulnerability/wordpress-wp-base-booking-plugin-5-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve