CVE-2024-3753

The Hostel WordPress plugin prior to 1.1.5.3 is affected by a Reflected Cross‑Site Scripting vulnerability: a parameter rendered back in the page is not properly sanitized/escaped, enabling an attacker to leverage XSS against high‑privilege users such as admins. CVSS 3.1 base score 5.9 (AV:N/AC:L...

PT-2024-27631 · WordPress · Hostel Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Hostel WordPress plugin versions prior to 1.1.5.3 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. This...

WordPress plugin Hostel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...