VikBooking Hotel Booking Engine & PMS, CVE-2022-1528

CVE, Research URL: CVE-2022-1528
Home page URL: Security reports for VikBooking Hotel Booking Engine & PMS
Application: VikBooking Hotel Booking Engine & PMS
Published on: May 30, 2022
Research Description: The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting
Affected versions: max 1.5.9.
Status: vulnerable

VikBooking Hotel Booking Engine &amp; PMS, CVE-2022-1528