CVE-2023-54358

🗓️ 09 Apr 2026 20:54:48Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 2 Views🌐 WEB

CVE-2023-54358: Reflected XSS in WordPress adivaha Travel Plugin 2.3 via isMobile.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2023-54358	9 Apr 202620:54	–	attackerkb
CNNVD	WordPress plugin adivaha Travel 跨站脚本漏洞	9 Apr 202600:00	–	cnnvd
Cvelist	CVE-2023-54358 WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile	9 Apr 202620:54	–	cvelist
EUVD	EUVD-2023-60549	9 Apr 202621:31	–	euvd
NVD	CVE-2023-54358	9 Apr 202621:16	–	nvd
Positive Technologies	PT-2026-31725	9 Apr 202600:00	–	ptsecurity
Vulnrichment	CVE-2023-54358 WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile	9 Apr 202620:54	–	vulnrichment

Vulners

Node

adivaha wordpress_adivaha_travel_pluginMatch2.3

[
  {
    "vendor": "Adivaha",
    "product": "WordPress adivaha Travel Plugin",
    "versions": [
      {
        "version": "2.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/51663
adivaha	www.adivaha.com/
wordpress	www.wordpress.org/plugins/adiaha-hotel/
vulncheck	www.vulncheck.com/advisories/wordpress-adivaha-travel-plugin-reflected-xss-via-ismobile

Parameter	Position	Path	Description	CWE
isMobile	query param	/mobile-app/v3/	Reflected cross-site scripting vulnerability in WordPress adivaha Travel Plugin 2.3 via the isMobile GET parameter on /mobile-app/v3/ that allows unauthenticated attackers to inject malicious scripts.	CWE-79

24 May 2026 01:37Current

6.2Medium risk

Vulners AI Score6.2

CVSS 45.1

CVSS 3.16.1

EPSS0.00118

SSVC

CWE-79