Cross-site Scripting Vulnerability in Booking System Trafft by Ameliabooking
CVE-2025-58213

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Booking System Trafft
Vendor
CVE Published:
27 August 2025

What is CVE-2025-58213?

The Booking System Trafft by Ameliabooking contains a vulnerability that allows for Cross-site Scripting (XSS), which can lead to unauthorized access or manipulation of users' data. This issue arises from improper handling of input during web page generation, enabling attackers to inject malicious scripts into the application. Affected versions range from n/a to 1.0.14, making it crucial for users to upgrade to secure versions to mitigate the risk associated with this vulnerability.

Affected Version(s)

Booking System Trafft <= 1.0.14

References

https://patchstack.com/database/wordpress/plugin/booking-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martino Spagnuolo (r3verii) (Patchstack Alliance)
.
CVE-2025-58213 : Cross-site Scripting Vulnerability in Booking System Trafft by Ameliabooking