Input validation vulnerability in Hostel 1.1.5.1

The Hostel plugin for WordPress is a software that is vulnerable to a type of attack called Stored Cross-Site Scripting. This vulnerability affects versions 1.1.5.1 and earlier of this plugin. An attacker who has administrator-level access can inject malicious web scripts into pages so that when a user accesses these pages, the malicious scripts are executed. This vulnerability only affects multi-site installations or installations where certain security features are disabled. This vulnerability may have already been identified and reported as CVE-2023-32120.