Input validation vulnerability in Hostel 1.1.5.2

The Hostel plugin for WordPress has a security flaw that could leave it vulnerable to a type of hacking called Reflected Cross-Site Scripting. This happens when certain parts of the plugin, called ‘offset’ and ‘type’ parameters, don’t have enough protection from harmful code. This means that someone who is not logged in to the website could inject their own code into pages and potentially cause harm. They could do this by tricking a user into clicking on a link.