| Package | Affected versions | Patched versions |
|---|---|---|
| booking core | = 1.7.0 |
Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About Yourself” section under the “My Profile” page, " (2) “Hotel Policy” field under the “Hotel Details” page, (3) “Pricing code” and “name” fields under the “Manage Tour” page, and (4) all the labels under the “Menu” section.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free