XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.Referenceshttps://wordpress.org/plugins/hostel/#developershttps://wpvulndb.com/vulnerabilities/9289