The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Citybook Theme | — | Update citybook theme to version 2.3.4, or a newer patched version | Dec 8, 2025 | Dec 27, 2019 |
| Easybook Theme | — | Update easybook theme to version 1.2.2, or a newer patched version | Dec 8, 2025 | Dec 27, 2019 |
| Townhub Theme | — | Update townhub theme to version 1.0.6, or a newer patched version | Dec 8, 2025 | Dec 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub