Hostel Plugin <= 1.1.3 - Unauthenticated Stored XSS

2019-05-2500:00:00

Admavidhya N

wpscan.com

0.001 Low

EPSS

Percentile

36.3%

JSON

This vulnerability allows any user can inject Javascript code and the code will be executed on the admin side when he visits the Bookings Page Authentication Required:No Affected Version: 1.1.3 or possibly below Fixed version:1.1.4

CPENameOperatorVersion
hostellt1.1.4

CPE	Name	Operator	Version
	hostel	lt	1.1.4

References

docs.google.com/document/d/1lBnwTY82_UO9XLmoaH3mD9AF-GZ0TPQ_dNKEymDCxzY/edit?usp=sharing

plugins.trac.wordpress.org/changeset/2094560/hostel

0.001 Low

EPSS

Percentile

36.3%

JSON

Related for WPVDB-ID:EFB1C816-85BF-4A4D-B0EF-C98136CB93CC