Known CVE

WP BASE Booking - Reflected XSS

WP BASE Booking of Appointments, Services and Events WordPress plugin < 5.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to load a maliciously crafted URL.