CVE-2026-116405 Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions

Description

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.

Affected products and versions

Product	Affected versions	Fixed in
VikRentCar 1.4	earliest → 1.4.9	No fix stated

Other CVEs of VikRentCar

The 7 CVEs of VikRentCar →

CVE-2026-28160 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp… 7.1 High CVE-2026-112838 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp… 7.1 High CVE-2026-112835 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp… 7.1 High CVE-2026-112836 Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Forgery.This… 8.8 High