WP Base Booking <=6.3.2 XSS Vulnerability
CVE-2026-73402 Published on August 20, 2026

WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.

NVD

Vulnerability Analysis

CVE-2026-73402 is exploitable with network access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
LOW

Weakness Type

What is a XSS Vulnerability?

The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVE-2026-73402 has been classified to as a XSS vulnerability or weakness.


Products Associated with CVE-2026-73402

Want to know whenever a new CVE is published for Hakan Ozevin Wp Base Booking Appointments Services Events? stack.watch will email you.

Hakan Ozevin Wp Base Booking Appointments Services Events
 

Affected Versions

Hakan Ozevin WP BASE Booking (WordPress Plugin wp-base-booking-of-appointments-services-and-events):