CVE-2026-28160 — Vulnerability intelligence

e4jvikwp — VikRentCar

Published: 2026-10-30T18:30:32.657Z

CVSS

7.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.10.

Sources

• CVE-2026-28160
• Original advisory
• CVE-2026-28160