VULNERABILITY INTELLIGENCE

CVE-2025-70227

CVSS score7.5 HIGH

EPSS probability0.30%

CISA KEVNot currently listed

Published2026-03-10

Last modified2026-06-17

Description

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.