CVE-2024-12400

The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

CVE-2024-12400

creationtimestamp| type| source ---|---|--- 2025-01-30 06:09:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113915812673966819 2025-01-30 06:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthuotr42j 2025-01-30 07:11:29+00:00| seen|...

CVE-2024-12400

The tourmaster WordPress plugin, in versions prior to 5.3.5 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly escape generated URLs before they are outputted in attributes, which can allow for the execution of malicious scripts. To remediate this ...

CVE-2024-12400 Tourmaster < 5.3.5 - Reflected XSS

The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

CVE-2024-12400 Tourmaster < 5.3.5 - Reflected XSS

The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...