Threats tagged 'ghsa-chpw-chc9-57cx'

A stored cross-site scripting (XSS) vulnerability exists in VikBooking Hotel Booking Engine & PMS versions up to 1.8.20. This vulnerability allows attackers to inject malicious scripts that are stored and later executed in users' browsers during web page generation. The flaw is due to improper neutralization of input, leading to potential compromise of confidentiality, integrity, and availability.