VULNERABILITY INTELLIGENCE

CVE-2025-49904

CVSS score7.1 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-11-06
Last modified2026-10-07

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3.

Primary references