CVE-2022-29443 – WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
https://notcve.org/view.php?id=CVE-2022-29443
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin <= 3.0 at WordPress. Múltiples vulnerabilidades de tipo Cross-Site Scripting (XSS) almacenado y autenticado (rol de colaborador o usuario superior) en el plugin Nicdark's Hotel Booking versiones 3.0 incluyéndola, en WordPress Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin < 3.3 at WordPress. • https://patchstack.com/database/vulnerability/nd-booking/wordpress-hotel-booking-plugin-3-0-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities https://wordpress.org/plugins/nd-booking • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •