Description
Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wpdevelop | Booking Calendar | ≤ 11.4.2 | — |
High · 7.1
CVE-2026-59558
EUVD-2026-49225GHSA-45v6-jjpf-7xvm
WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability
Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack