Known vulnerabilities in the Hostel plugin
14 security advisories have been published for the Hostel plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Hostel - Security Vulnerability (CVE-2026-1645) MEDIUM
- Hostel - Cross-Site Scripting (XSS) (CVE-2026-3907) MEDIUM
- Hostel - Cross-Site Scripting (XSS) (CVE-2026-1838) MEDIUM
- Hostel - Cross-Site Scripting (XSS) (CVE-2023-32120) MEDIUM
- Hostel - Cross-Site Scripting (XSS) (CVE-2025-66119) HIGH
- Hostel - Cross-Site Scripting (XSS) (CVE-2025-6236) MEDIUM
- Hostel - Cross-Site Scripting (XSS) (CVE-2025-6234) MEDIUM
- Hostel - SQL Injection (CVE-2025-39566) HIGH
- Hostel - Cross-Site Scripting (XSS) (CVE-2025-30848) HIGH
- Hostel - Cross-Site Scripting (XSS) (CVE-2025-31102) HIGH
- Hostel - Cross-Site Scripting (XSS) (CVE-2024-3753) MEDIUM
- Hostel - Cross-Site Request Forgery (CSRF) (CVE-2024-4314) MEDIUM
- Hostel - Cross-Site Scripting (XSS) (CVE-2023-0545) MEDIUM
- Hostel - Cross-Site Scripting (XSS) (CVE-2019-12345) MEDIUM