7.1
High
CVE-2026-95591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.14.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VikBooking Hotel Booking Engine & PMS 1.8 | earliest → 1.8.14 | No fix stated |
Other CVEs of VikBooking Hotel Booking Engine & PMS
The 16 CVEs of VikBooking Hotel Booking Engine & PMS →
CVE-2026-95684
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
7.2
High
CVE-2026-15401
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
7.2
High
CVE-2026-15346
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
6.1
Medium
CVE-2026-6820
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
7.2
High