CVE-2022-1528

CVE-2022-1528: VikBooking < 1.5.9 - Reflected Cross-Site Scripting

Vendor Unknown
Product VikBooking Hotel Booking Engine & PMS
Weakness CWE-79 · XSS
Published May 30, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting

Key dates

02Disclosure timeline

May 30, 2022 CVE published
August 3, 2024 Record updated