Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:motopress:hotel_booking:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

Stored Cross-Site Scripting in MotoPress Hotel Booking Plugin

The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe webhook listener due to missing signature verification and improper output sanitization.

Hotel Booking web-application xss wordpress plugin-vulnerability
1r 1t 1c