Skip to content
OpenAdvisories
High · 7.1 CVE-2026-125789 EUVD-2026-126045GHSA-wv4v-xxp3-r59x

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Eng…

Published Nov 15, 2026 · Assigned by Patchstack

Vendor: e4jvikwp Product: VikBooking Hotel Booking Engine & PMS

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Stored XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.20.

Affected products

VendorProductAffectedFixed
e4jvikwp VikBooking Hotel Booking Engine & PMS 0 ≤1.8.20 —

References