CVE-2021-25061: Wpbookingsystem Wp Booking System

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page.

Affected products

• Wpbookingsystem Wp Booking System: before 2.0.15 (fixed in 2.0.15)

Published 2022-01-17. Last modified 2026-06-17.