High · 7.1 CVE-2023-30496 EUVD-2023-34911GHSA-cc7p-gmq6-jjr5

WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.5 is vulnerable to Cross Site Scripting (XSS)

Published Nov 22, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: MagePeople Team Product: WpBusTicketly

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MagePeople Team WpBusTicketly plugin <= 5.2.5 versions.

Affected products

Vendor	Product	Affected	Fixed
MagePeople Team	WpBusTicketly	≤ 5.2.5	—

References

https://patchstack.com/database/vulnerability/bus-ticket-booking-with-seat-reservation/wordpress-bus-ticket-booking-with-seat-reservation-plugin-5-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry