Vikwp Hotel Booking Engine \& Pms
3 CVEs affecting Vikwp Hotel Booking Engine \& Pms. Latest disclosed: 2022-05-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1409 | High | 7.2 | 2022-05-16 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators… |
CVE-2022-1407 | Medium | 6.5 | 2022-05-16 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding a tracking campaign, and does not escape… |
CVE-2022-1408 | Medium | 4.8 | 2022-05-16 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not escape various settings before outputting them in attributes, which could allo… |