Description XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress. References https://wordpress.org/plugins/hostel/#developers https://wpvulndb.com/vulnerabilities/9289