Reflected XSS Vulnerability in Court Reservation by Webmuehle
CVE-2025-68852

7.1HIGH

Key Information:

Vendor

WordPress
Status
Court Reservation
Vendor
CVE Published:
20 February 2026

What is CVE-2025-68852?

The Court Reservation application developed by Webmuehle contains a reflected Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages. This vulnerability affects versions of the application up to and including 1.10.9, posing a significant security risk by enabling unauthorized access to sensitive data and potentially compromising user sessions. Website administrators are urged to apply appropriate security measures and updates to mitigate this risk.

Affected Version(s)

Court Reservation 0 <= 1.10.13

References

https://patchstack.com/database/Wordpress/Plugin/court-re...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Skalucy | Patchstack Bug Bounty Program
.