Product

VikBooking Hotel Booking Engine & PMS (<= 1.8.15)

1 brief RSS

Stored Cross-Site Scripting in VikBooking WordPress Plugin

The VikBooking Hotel Booking Engine & PMS plugin for WordPress up to version 1.8.15 contains a Stored XSS vulnerability in the 'attachments[name]' parameter that allows unauthenticated attackers to inject malicious scripts.

VikBooking Hotel Booking Engine & PMS web-application wordpress xss

2t 1c 2h ago