What is GHSA-m65h-f32q-qmrr?

GHSA-m65h-f32q-qmrr is a security advisory published by GitHub Security Advisories with High severity. The VikBooking Hotel Booking Engine \u0026 PMS WordPress plugin before 1.8.15 does not restrict the...

Which CVE IDs does GHSA-m65h-f32q-qmrr cover?

GHSA-m65h-f32q-qmrr covers the following CVE IDs: CVE-2026-85127. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m65h-f32q-qmrr?

GHSA-m65h-f32q-qmrr has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-m65h-f32q-qmrrHighCVSS 8.8

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-85127 →

📋 Description

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files unauthenticated visitors may attach to its live chat, nor sanitize their contents, allowing them to store active content which is executed in the context of an administrator viewing the conversation.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-85127
https://wpscan.com/vulnerability/4bca17fb-e9b4-4dc7-994f-08ce4aafadc7
https://github.com/advisories/GHSA-m65h-f32q-qmrr