Cross-site Scripting Flaw Found in Easy Hotel Booking by Themewant

CVE-2025-57938

What is CVE-2025-57938?

A cross-site scripting (XSS) vulnerability has been identified in the Easy Hotel Booking plugin developed by Themewant. This flaw allows attackers to exploit improper input handling during web page generation, potentially leading to DOM-Based XSS attacks. Users may be susceptible to malicious scripts being executed in their browsers, posing significant security risks. The affected versions range from an undefined version up to 1.6.9. It's crucial for users to assess their installations and apply necessary updates or mitigations to safeguard their websites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References