CVE-2026-15401

VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter

List of 499 websites affected by CVE-2026-15401

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
********************************.com	United States	,,*
**************.fr	France	,,*
***************.com	United States	,,*
******.com	Malaysia	,,*
******************.nl	Netherlands	,,*
*******************..uk	GB	,,*
****.jo	Jordan	,,*
*******.de	Germany	,,*
**************.es	Spain	,,*
***********.org	United States	,,*
*************.com	France	,,*
**********************.com	Spain	,,*
***********.nl	Netherlands	,,*
*********************.com	Italy	,,*
********.at	Germany	,,*
****************.com	Ireland	,,*
***********.com	Cyprus	,,*
**************.com	Bulgaria	,,**
*******.gr	Germany	,,**
********.com	Spain	,,**