What is CVE-2026-59558?
CVE-2026-59558 is an unauthenticated Cross Site Scripting (XSS) vulnerability found in Booking Calendar plugin versions up to 11.4.2. This allows attackers to execute arbitrary JavaScript in a user's browser. Updating to the latest version of the plugin is required.
Azərbaycanca: CVE-2026-59558, Booking Calendar plugininin 11.4.2 və daha əvvəlki versiyalarında aşkarlanmış, autentifikasiya olunmamış Cross Site Scripting (XSS) zəifliyidir. Bu, təcavüzkara istifadəçi brauzerində ixtiyari JavaScript kodu icra etməyə imkan verir. Pluginin ən son versiyasına yenilənməlidir.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
Which versions of the Booking Calendar plugin are affected by CVE-2026-59558?
The vulnerability affects plugin versions up to and including 11.4.2.
What can an attacker do by exploiting CVE-2026-59558?
This unauthenticated XSS vulnerability allows attackers to execute arbitrary JavaScript in a user's browser.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.