CVE-2026-116749 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress wp_kses_post className cross site scripting

October 28, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress. This vulnerability affects the function wp_kses_post. This manipulation of the argument className causes cross site scripting.

This vulnerability is handled as CVE-2026-116749. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More