CVE-2026-103587 | Webkul QloApps up to 1.7.0 Hotel Reservation System date_to/id_room_type cross site scripting

A vulnerability classified as problematic was found in Webkul QloApps up to 1.7.0. Affected by this issue is some unknown functionality of the component Hotel Reservation System. Executing a manipulation of the argument date_to/id_room_type can lead to cross site scripting.

This vulnerability appears as CVE-2026-103587. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More