To plugin page

Not fixed

WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

4.1

CVSS 3.1 score Medium severity

Monitoring Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Opal Hotel Room Booking

Type

Plugin

Vulnerable versions

<= 1.2.7

Fixed in

N/A

PSID

5a598010f868

CVE ID

CVE-2022-29449

Classification

Cross Site Scripting (XSS)

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Required privilege

Requires contributor or higher role user authentication.

Credits

Ngo Van Thien (Alliance project)

Publicly disclosed

2022-05-17

Details

Stored Cross-Site Scripting (XSS) vulnerability discovered by Ngo Van Thien (Patchstack Alliance) in WordPress Opal Hotel Room Booking plugin (versions <= 1.2.7).

Solution

Deactivate and delete. No reply from the vendor.

References

CVE-2022-29449 Plugin page

WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

Details

Solution

References

No other known vulnerabilities found for Opal Hotel Room Booking.
Let us know if we missed something.

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

Details

Solution

References

No other known vulnerabilities found for Opal Hotel Room Booking.Let us know if we missed something.

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

Let us know if we have missed a vulnerability reported elsewhere

Thank you for contributing!

No other known vulnerabilities found for Opal Hotel Room Booking.
Let us know if we missed something.