CVE-2022-29449: 
WordPress vulnerability analysis and mitigation

The CVE-2022-29449 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Opal Hotel Room Booking WordPress plugin versions 1.2.7 and below. The vulnerability was discovered and reported by Ngo Van Thien on May 17, 2022. This security issue requires contributor or higher user role privileges to exploit (Patchstack).

The vulnerability has been assigned a CVSS score of 4.1, indicating a low severity impact. It requires network access vector, low privileges, and user interaction for successful exploitation. The vulnerability allows authenticated users with contributor or higher privileges to inject malicious scripts into the website (Patchstack).

If exploited, this vulnerability could allow malicious actors to inject malicious scripts, including redirects, advertisements, and other HTML payloads into the website. These injected scripts would be executed when guests visit the affected site (Patchstack).

The plugin has been closed as of May 20, 2022, and is no longer available for download due to security issues. No official fix was released for this vulnerability. Website administrators using this plugin should consider removing it and finding alternative solutions (WordPress).