Today the JVN released a report for a cross-site scripting (XSS) vulnerability in the WordPress plugin Booking Package credited to “Gen Sato of Mitsui Bussan Secure Directions, Inc. “, which is described as impacting “versions prior to 1.5.11” and involving “handling some URL query parameters.”

…

[Read more]