Cross-site Scripting Flaw Found in Easy Hotel Booking by Themewant

CVE-2025-57938

What is CVE-2025-57938?

A cross-site scripting (XSS) vulnerability has been identified in the Easy Hotel Booking plugin developed by Themewant. This flaw allows attackers to exploit improper input handling during web page generation, potentially leading to DOM-Based XSS attacks. Users may be susceptible to malicious scripts being executed in their browsers, posing significant security risks. The affected versions range from an undefined version up to 1.6.9. It's crucial for users to assess their installations and apply necessary updates or mitigations to safeguard their websites.

References