< 1.1.0
1.1.0
The booking-sms plugin before 1.1.0 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.