Read the docs

Vikwp

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Vikwp records in CISA KEV

No Vikwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vikbooking Hotel Booking Engine & Pms 7 records MEDIUM Hotel Booking Engine & Pms 3 records LOW Vikbooking Hotel Booking Engine & Property Management System Plugin 2 records MEDIUM Car Rental Management System 1 record LOW Vik Booking 1 record LOW

Records

1 record in Vik Booking · all components

TI-2022-01401 CVE-2022-1528 · GHSA-6fm6-9j5g-vf3g

VikBooking < 1.5.9 - Reflected Cross-Site Scripting

Priority LOW 29

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-30 Fixed in 1.5.9 CWE-79
Open these records in search →