VikBooking Hotel Booking Engine & PMS

Admin+ Stored XSS vulnerability < 1.7.2

CSRF to Settings Change vulnerability <= 1.7.2

CrossSite Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 1.7.2

Insecure Direct Object References vulnerability < 1.6.8

Reflected Cross Site Scripting (XSS) vulnerability <= 1.6.7