CVE-2026-66687MEDIUM NVDCVSS Score 6.5Severity MEDIUMPublished Aug 13, 2026Vendor unknownDescriptionCustomer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/service-booking-manager/vulnerability/wordpress-wpbookingly-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve