CVE-2026-117516

A SQL injection vulnerability exists in the Contact Form Handler component of the oretnom23 php-travel-agency-system software. The flaw is located within an unknown function of the contact_insert.php file, where improper handling of the name , company , email , topic , phone , and comments argume...

EUVD-2026-111238

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

PT-2026-127184

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

CVE-2026-2442: Improper Neutralization of CRLF Sequences

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences 'CRLF Injection' in all versions up to, and including, 2.0.7. This is due to the contact form handler performing placeholder substitution on...