What’s Vulnerable › Products

VikBooking Hotel Booking Engine & PMS vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your VikBooking Hotel Booking Engine & PMS version is affected

Latest VikBooking Hotel Booking Engine & PMS vulnerabilities

• CVE-2026-85127 — VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment (CVSS 8.8)
• CVE-2022-1409 — VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload (CVSS 7.2)
• CVE-2022-1408 — VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2022-1407 — VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRF (CVSS 6.5)