Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-51664 EUVD-2024-45469GHSA-652w-6p8v-f5h6

WordPress Beds24 Online Booking plugin <= 2.0.25 - Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markkinchin Beds24 Online Booking beds24-online-booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through <= 2.0.25.

Affected products

VendorProductAffectedFixed
markkinchin Beds24 Online Booking ≤ 2.0.25 —

References