Hotel Booking Engine & Pms vulnerabilities

1 known vulnerability in Hotel Booking Engine & Pms from Vikwp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  VikBooking Hotel Booking Engine & PMS: Unrestricted Upload of File with Dangerous Type

  CVE-2022-1409May 16, 2022VikBooking Hotel Booking Engine & PMSEPSS 1.47%

  The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code