Medium · 5.9 CVE-2023-24397 EUVD-2023-28453GHSA-mfj2-2p2g-g77q

WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Reservation.Studio Reservation.Studio widget plugin <= 1.0.11 versions.

Vendor	Product	Affected	Fixed
Reservation.Studio	Reservation.Studio widget	≤ 1.0.11	—