CVE-2026-85127 | VikBooking Hotel Booking Engine & PMS Plugin up to 1.8.14 on WordPress Live Chat cross site scripting

A vulnerability labeled as problematic has been found in VikBooking Hotel Booking Engine & PMS Plugin up to 1.8.14 on WordPress. This affects an unknown part of the component Live Chat. Such manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-85127. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More