CVE-2025-32923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.This issue affects Tourmaster: from n/a through 5.4.1...

CVE-2025-32923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.This issue affects Tourmaster: from n/a through 5.4.1...

CVE-2025-32923

CVE-2025-32923 concerns the WordPress plugin Tourmaster (Tour Master – Tour Booking, Travel, Hotel) prior to version 5.4.1. It is a reflected XSS caused by improper input neutralization during web page generation. A fix is available in version 5.4.1 (patched).

PT-2025-16542

Name of the Vulnerable Software and Affected Versions NotFound Tourmaster affected versions not specified Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This problem enables attacke...