← WordPress Vulnerabilities
WordPress security by component

igumbi Online Booking

igumbi Online Booking is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 21, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: igumbi

CVE-2024-13455: igumbi Online Booking: Cross-site scripting

igumbi Online Booking is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedFeb 21, 2025
Safe version guidanceSee mitigation notes
Safe version
Feb 21, 2025 CVE-2024-13455
igumbi Online Booking: Cross-site scripting
igumbi Online Booking is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4