CVE-2022-1644: Call&book Mobile Bar Project Call&book Mobile Bar

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Affected products

• Call&book Mobile Bar Project Call&book Mobile Bar: up to and including 1.2.2

Published 2022-05-30. Last modified 2026-06-17.