WordPress Hostel plugin <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter vulnerability

Reflected Cross-Site Scripting via 'shortcodeid' Parameter vulnerability discovered by Bee - FPT University in WordPress Plugin Hostel versions = 1.1.6...

CVE-2023-32120

CVE-2023-32120 affects the WordPress plugin Hostel. The issue is an XSS vulnerability caused by improper neutralization of input during web page generation, enabling DOM-based XSS in affected versions up to 1.1.5.1. A fix is available in version 1.1.5.2. Multiple connected sources corroborate thi...

CVE-2023-32120 WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bob Hostel allows DOM-Based XSS.This issue affects Hostel: from n/a through 1.1.5.1...

CVE-2025-66119

CVE-2025-66119 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Hostel plugin. Affected software: Hostel plugin versions up to and including 1.1.5.9. Root cause: improper neutralization of input during web page generation. Impact per records: potential for user-visi...

CVE-2025-30848 WordPress Hostel plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5...

CVE-2025-31102

CVE-2025-31102 affects the WordPress plugin Hostel (versions up to 1.1.5.5). It is a Reflected Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. The impact is reflected script execution in a victim’s browser when a crafted URL is visited. Remed...

CVE-2025-31102 WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.5...

WordPress Hostel Plugin < 1.1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Hostel Type Plugin Vulnerable versions 1.1.5.3 Fixed in 1.1.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3753 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8eec664963a4 Credits Bob Matyas Required...

WordPress hostel plugin <= 1.1.5.3 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Hostel versions = 1.1.5.3...

WordPress Hostel Plugin <= 1.1.5.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hostel Type Plugin Vulnerable versions = 1.1.5.3 Fixed in 1.1.5.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4314 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5c8220b39532 Credits Benedictus Jovan aillesiM...

WordPress Hostel Plugin <= 1.1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Hostel Type Plugin Vulnerable versions = 1.1.5.1 Fixed in 1.1.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32120 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID baaca7c51cda Credits yuyudhn Required privilege...