Skip to content
OpenAdvisories
High · 7.1 CVE-2025-52787 EUVD-2025-21637GHSA-j5pw-8ggp-mw6p

WordPress Tennis Court Bookings plugin <= 1.2.7 - Cross Site Scripting (XSS) Vulnerability

Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EZiHosting Tennis Court Bookings tennis-court-bookings allows Reflected XSS.This issue affects Tennis Court Bookings: from n/a through <= 1.2.7.

Affected products

VendorProductAffectedFixed
EZiHosting Tennis Court Bookings ≤ 1.2.7 —

References