Read the docs

Vikwp

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Vikwp records in CISA KEV

No Vikwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vikbooking Hotel Booking Engine & Pms 7 records MEDIUM Hotel Booking Engine & Pms 3 records LOW Vikbooking Hotel Booking Engine & Property Management System Plugin 2 records MEDIUM Car Rental Management System 1 record LOW Vik Booking 1 record LOW

Records

1 record in Car Rental Management System · all components

TI-2021-06806 CVE-2021-24519 · GHSA-5vqg-9g8h-vwmq

Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 23

The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' field when adding or editing a Characteristic, allowing high privilege users such as admin to use XSS p…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00613 Published 2021-08-16 Fixed in 1.1.10 CWE-79
Open these records in search →