CVE-2026-103303

The Turisbook Booking System WordPress plugin (versions through 1.3.8 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The issue arises because the plugin lacks proper authorisation and CSRF checks when saving settings, and fails to sanitise and escape one of these settings before displayin...