cleantalk
Vulnerabilities and Security Researches

VikBooking Hotel Booking Engine & PMS, CVE-2026-42683

CVE, Research URL

CVE-2026-42683

Published on
Jun 01, 2026
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows DOM-Based XSS. This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.8.
Affected versions
max 1.8.9.
Status
vulnerable