CVE-2022-1528

The CVE-2022-1528 entry affects the VikBooking Hotel Booking Engine & PMS WordPress plugin (before 1.5.9). The vulnerability is a Reflected Cross-Site Scripting caused by not escaping the current URL before embedding it in a JavaScript context, enabling potential script execution. Reported PoCs s...