prasunsen Hostel

• CVE-2026-1645 Medium 4.4 Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL Setting 0.3%
• CVE-2026-3907 Medium 6.4 Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wphostel-book' Shortcode 0.4%
• CVE-2026-1838 Medium 6.1 Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter 0.3%
• CVE-2024-4314 Medium 4.3 hostel <= 1.1.5.3 - Cross-Site Request Forgery 0.2%