CVE-2021-24645

MEDIO 4.8CVE-2021-24645 · Published 08/11/2021 · updated 17/06/2026

In breve

CVE-2021-24645 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda booking.com product helper (bookingholdings).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.62%, superiore al 49.8% delle vulnerabilità.
Correzione: aggiornare a 1.0.2 o successiva.

Package	Affected versions	Patched versions
booking.com product helper bookingholdings	`< 1.0.2`	`1.0.2`

Description

The Booking.com Product Helper WordPress plugin before 1.0.2 does not sanitize and escape Product Code when creating Product Shortcode, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

References

wpscan.com/vulnerability/b15744de-bf56-4e84-9427-b5652d123c15 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free