← CVE Intelligence

CVE-2022-1528

VikBooking < 1.5.9 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting

Affected (CNA)

Vendor / productVersions
Unknown / VikBooking Hotel Booking Engine & PMSaffected 1.5.0 before 1.5.0*; affected 1.5.9 before 1.5.9

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.