Medium · 5.9 CVE-2023-35048 EUVD-2023-39084GHSA-cgc7-cg9h-8c4m

WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Published Jun 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin <= 1.2.1 versions.

Vendor	Product	Affected	Fixed
MagePeople Team	Booking and Rental Manager for Bike	≤ 1.2.1	—