title: Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
description: The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
product: Rezgo Online Booking
vendor: Unknown
versions:
lessThan: 4.1.8, status: affected, version: 4.1.8, versionType: custom
}