VikRentCar Car Rental Management System vulnerabilities

Product

VikRentCar Car Rental Management System

by e4jvikwp · last CVE Oct 28, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 4Medium 2Low 0

Severity

Exploitation

Watch

Add VikRentCar Car Rental Management System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-111120 New	8.8	0%	Oct 28	VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task Affected: through 1.4.8
CVE-2024-11640	8.8	0%	Mar 8	VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload Affected: through 1.4.2
CVE-2025-13724	7.5	0%	Dec 2	VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter Affected: through 1.4.4
CVE-2025-5322	7.2	1%	Jul 3	VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload Affected: through 1.4.3
CVE-2026-116750 New	6.5	0%	Oct 28	VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute Affected: through 1.4.10
CVE-2026-116749 New	6.4	0%	Oct 28	VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute Affected: through 1.4.10