Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <= 1.6.01 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAASPROJECT Booking Package | Booking Package | ≤ 1.6.01 | — |
High · 7.1
CVE-2023-39918
EUVD-2023-43616GHSA-8hgm-54v7-vqj3
WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)
Published Sep 4, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack