Threats tagged 'ghsa-2qmg-f74q-8r25'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-93429The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via High7.22026-11-07GCVE DatabaseCVE-2026-93429 The VikBooking Hotel Booking Engine & PMS plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'guests[][][documents]' parameter. This affects all versions up to and including 1.8.17. The flaw allows unauthenticated attackers who have a valid booking session token to inject malicious scripts that execute when users access the affected pages. Report on CVE-2026-93429 Vulnerability CWE-79 #ghsa-2qmg-f74q-8r25	GCVE Database	2026-11-07

Page 1 of 1