Cross-site Scripting Vulnerability in Webba Booking by Webba
CVE-2025-54729

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Webba Booking
Vendor
CVE Published:
14 August 2025

What is CVE-2025-54729?

The vulnerability in Webba Booking arises from improper handling of user input during web page generation, leading to Stored Cross-site Scripting (XSS) attacks. This flaw enables attackers to inject malicious scripts, which can be executed in the context of other users' sessions. Affected versions, from an unspecified start point through 6.0.5, must be evaluated to mitigate the risk of potential exploits, ensuring user data and site integrity are protected.

Affected Version(s)

Webba Booking <= 6.0.5

References

https://patchstack.com/database/wordpress/plugin/webba-bo...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

greenhats (Patchstack Alliance)
.
CVE-2025-54729 : Cross-site Scripting Vulnerability in Webba Booking by Webba