cleantalk
Vulnerabilities and Security Researches

Booking Calendar Contact Form, CVE-2025-48231

CVE, Research URL

CVE-2025-48231

Home page URL

Security reports for Booking Calendar Contact Form

Application

Booking Calendar Contact Form

Published on
Jul 04, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Booking Calendar Contact Form allows Stored XSS. This issue affects Booking Calendar Contact Form: from n/a through 1.2.58.
Affected versions
Min -, max 1.2.59.
Status
vulnerable
Previous vulnerability researches
BLAZE Retail Widget (CVE-2024-6297) , Jul 22, 2024
BLAZE Retail Widget (5aa63b7aac05249d22e77bf0bcbe643aaba6f01b) , Jun 26, 2024
New vulnerability
MyRewards – Loyalty Points and Rewards for WooCommerce – Reward orders, referrals, product reviews and more (CVE-2025-24757) , Jul 06, 2025
File Manager (CVE-2025-27358) , Jul 06, 2025
Booking Calendar Contact Form (CVE-2025-48231) , Jul 06, 2025
NGG Smart Image Search (CVE-2025-52832) , Jul 05, 2025
(Simply) Guest Author Name (CVE-2025-24764) , Jul 05, 2025