CVE-2026-73402

WP BASE Booking versions up to 6.3.2 are vulnerable to a Subscriber Cross Site Scripting (XSS) attack, which could allow an attacker to inject malicious scripts into web pages viewed by other users. This vulnerability poses a medium risk, as it can lead to unauthorized actions or data exposure for users with subscriber privileges. Organizations using affected versions should prioritize patching to mitigate potential exploitation.