🚨 CVE-2026-103590
QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restriction_min_los and restriction_max_los parameters, executing arbitrary JavaScript in the victim's administrative session.
🎖@cveNotify
GitHub
GitHub - Qloapps/QloApps: QloApps is a Free and Open-source hotel management and reservation system to take a hotel business online.…
QloApps is a Free and Open-source hotel management and reservation system to take a hotel business online. QloApps offers a Property Management System (PMS), a Booking Engine, and an attractive Hot...
September 30, 2026 15
