Threats Tagged 'ghsa-5r6g-j57j-3387'

1 threat

Threats Tagged 'ghsa-5r6g-j57j-3387'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.3%	CVE-2026-92234QloApps · Cross-site Scripting Medium5.1EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92234 QloApps versions up to 1.7.0 contain a cross-site scripting (XSS) vulnerability in the Hotel Reservation System feature management page. This occurs because child feature names are reflected without proper escaping in back-office validation error messages. Authenticated back-office users who click a crafted link can execute injected JavaScript within their administrative session. EPSS 0.3%Vulnerability Webkul #ghsa-5r6g-j57j-3387	CVE Database V5	2026-09-15

Showing 1–1 of 1 result