Medium · 4.8 CVE-2021-36847 EUVD-2021-23423GHSA-95pg-qhjc-gcqg

WordPress Webba Booking plugin <= 4.2.21 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Aug 22, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at WordPress.

Vendor	Product	Affected	Fixed
WebbaPlugins	Webba Booking (WordPress plugin)	<= 4.2.21 – ≤ 4.2.21	—