Input validation vulnerability in Beds24 Online Booking 2.0.29

The Beds24 Online Booking plugin for WordPress has a security issue that allows hackers to insert harmful code onto web pages. This can occur when using the ‘bookwidget’ feature and affects all versions up to 2.0.29. The plugin does not properly protect against malicious code, which means that attackers with contributor-level access or higher can inject their own code onto pages. This can be triggered whenever a user visits the affected page.