Advisories · Technology
VikBooking Hotel Booking Engine & PMS.
Every CVE that names VikBooking Hotel Booking Engine & PMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment
- VikBooking Hotel Booking Engine & PMS
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
VikBooking < 1.7.2 - Admin+ Stored XSS
- VikBooking Hotel Booking Engine & PMS
- CVSS 5.9 Medium
VikBooking < 1.6.8 - Broken Access Control
- VikBooking Hotel Booking Engine & PMS
- Broken access control
- CVSS 8.1 High
VikBooking < 1.6.8 - Insecure Direct Object References
- VikBooking Hotel Booking Engine & PMS
- Broken access control
- CVSS 7.1 High
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
- VikBooking Hotel Booking Engine & PMS
- Cross-site scripting (XSS)
-
VikBooking < 1.5.9 - Reflected Cross-Site Scripting
- VikBooking Hotel Booking Engine & PMS
- Cross-site scripting (XSS)
-
VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload
- VikBooking Hotel Booking Engine & PMS
- Unrestricted file upload
-
VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scripting
- VikBooking Hotel Booking Engine & PMS
- Cross-site scripting (XSS)
-
VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRF
- VikBooking Hotel Booking Engine & PMS
- Cross-site request forgery (CSRF)