Product

VikBooking Hotel Booking Engine & PMS Plugin for WordPress (<= 1.8.13)

1 brief RSS

VikBooking Hotel Booking Engine & PMS Plugin Vulnerable to Stored Cross-Site Scripting (CVE-2026-15401)

The VikBooking Hotel Booking Engine & PMS plugin for WordPress versions up to and including 1.8.13 is vulnerable to Stored Cross-Site Scripting (XSS) via the 'vbfX' parameter, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a user accesses an infected page.

VikBooking Hotel Booking Engine & PMS plugin for WordPress wordpress xss web-vulnerability stored-xss cms

1r 2t 1c 1h ago