Cpe:2.3:a:ba_book_everything:ba_book_everything:*:*:*:*:*:*:*:*

The BA Book Everything plugin for WordPress contains a Stored XSS vulnerability in the booking_service_qty parameter, allowing unauthenticated attackers to execute arbitrary scripts in the context of an administrator.