CVE-2020-15536: XSS
Published Jul 5, 2020
·Updated
An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields.
Affected Software
1 affected component
Online Hotel Booking System Project Online Hotel Booking System Wordpress<=1.1
Event History
Jul 5, 2020
CVE Published
via MITRE·03:13 PM
Data Sourced
via MITRE·03:13 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-15536?
CVE-2020-15536 is classified as a medium severity vulnerability due to its potential for persistent XSS attacks.
2
How do I fix CVE-2020-15536?
To fix CVE-2020-15536, you should update the Hotel Booking System Pro plugin to the latest version beyond 1.1.
3
What type of vulnerability is CVE-2020-15536?
CVE-2020-15536 is a persistent cross-site scripting (XSS) vulnerability.
4
Which version of the Hotel Booking System Pro plugin is affected by CVE-2020-15536?
CVE-2020-15536 affects the Hotel Booking System Pro plugin version 1.1 and earlier.
5
Is user data at risk due to CVE-2020-15536?
Yes, CVE-2020-15536 can potentially compromise user data through XSS attacks that exploit registration fields.