Skip to content
OpenAdvisories
High · 7.1 CVE-2024-32563 EUVD-2024-30365GHSA-j789-q7gm-pggc

WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Published Apr 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: VikBooking Hotel Booking Engine & PMS Product: VikBooking Hotel Booking Engine & PMS

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VikBooking Hotel Booking Engine & PMS allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.6.7.

Affected products

VendorProductAffectedFixed
VikBooking Hotel Booking Engine & PMS VikBooking Hotel Booking Engine & PMS ≤ 1.6.7 —

References