iGMS Direct Booking vulnerabilities
We track 1 vulnerability in iGMS Direct Booking products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest iGMS Direct Booking vulnerabilities
- 8.8 High severity
iGMS Direct Booking: Improper Neutralization of Input During Web Page Generation
The iGMS Direct Booking WordPress plugin before 2.0 does not authorise or escape its widget appearance settings, allowing unauthenticated users to store arbitrary web scripts that execute in the context of an administrator viewing the iGMS Direct Booking WordP