Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-2231 The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.01 due to insuffi… https://www.cve.org/CVERecord?id=CVE-2026-2231
Post summary
The Fluent Booking WordPress plugin has a stored XSS vulnerability affecting all versions through 2.0.01, with no PoC, exploit, or patch information provided.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-2231 - Fluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters Intel Report: https://ift.tt/QbB5w4p
Post summary
A new CVE-2026-2231 vulnerability is announced for Fluent Booking <= 2.0.01, detailing an unauthenticated stored XSS flaw involving multiple parameters.