CVE-2026-121784: XSS

Published Nov 7, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. WpBookingly service-booking-manager allows Stored XSS.This issue affects WpBookingly: from n/a through 1.4.3.

Event History

Nov 7, 2026

CVE Published

via NVD·01:16 PM

Data Sourced

via NVD·01:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Does the available information specify authentication or other prerequisites for exploitation?

No. The provided information does not state whether an attacker needs an account, particular permissions, or user interaction to exploit the stored XSS issue.

Are any temporary mitigations or configuration workarounds documented?

No. The provided information identifies affected versions through 1.4.3 but does not provide mitigations, configuration changes, or a fixed release.

CVE-2026-121784: XSS

Event History

Frequently Asked Questions

Does the available information specify authentication or other prerequisites for exploitation?

Are any temporary mitigations or configuration workarounds documented?

Company

Resources

Contact

Frequently Asked Questions

Does the available information specify authentication or other prerequisites for exploitation?

Are any temporary mitigations or configuration workarounds documented?