All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-57723
HIGHpublished 2026-07-01 18:16 UTC · 3 days ago · modified 2026-07-01 19:16 UTC
7.4
CVSS / 10
// description
Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows Path Traversal. This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.12.
// weaknesses (CWE)
- CWE-352