CVE-2023-24396

MEDIUM CVSS: 5.9 Published: 2023-04-06 Modified: 2026-06-17

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.11 versions.

Affected Platforms

Vikwp Vikbooking Hotel Booking Engine \& Pms

Weakness Type

CWE-79, CWE-79

References