CVE-2022-1932

MEDIUM 6.1CVE-2022-1932 · Published 22/08/2022 · updated 17/06/2026

In short

CVE-2022-1932 is a MEDIUM (CVSS 6.1) vulnerability affecting rezgo online booking (rezgo).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.7% of all vulnerabilities.
Fix: update to 4.1.8 or later.

Package	Affected versions	Patched versions
rezgo online booking rezgo	`< 4.1.8`	`4.1.8`

Description

The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file

References

wpscan.com/vulnerability/005c2300-f6bd-416e-97a6-d42284bbb093 · Exploit

More vulnerabilities in rezgo online booking

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free