WordPress CultBooking Hotel Booking Engine plugin <= 2.1 - CSRF to Stored XSS vulnerability

CVE-2024-53753

What is CVE-2024-53753?

A cross-site request forgery (CSRF) vulnerability exists in the CultBooking Hotel Booking Engine that enables attackers to exploit the system. This flaw allows for stored cross-site scripting (XSS) attacks, which can lead to malicious scripts being injected into webpages viewed by users. Attackers can leverage this vulnerability to perform unauthorized actions on behalf of legitimate users, potentially compromising sensitive information or leading to further exploits. The affected versions include all prior to 2.1, emphasizing the importance of immediate remediation for users of this product.

References