The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Citybook Theme | — | Update citybook theme to version 2.3.4, or a newer patched version | Dec 8, 2025 | Dec 27, 2019 |
| Easybook Theme | — | Update easybook theme to version 1.2.2, or a newer patched version | Dec 8, 2025 | Dec 27, 2019 |
| Townhub Theme | — | Update townhub theme to version 1.0.6, or a newer patched version | Dec 8, 2025 | Dec 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub