CVE-2024-12400

The tourmaster WordPress plugin, in versions prior to 5.3.5 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly escape generated URLs before they are outputted in attributes, which can allow for the execution of malicious scripts. To remediate this ...

PT-2025-1830 · WordPress · Tourmaster

Name of the Vulnerable Software and Affected Versions: tourmaster WordPress plugin versions prior to 5.3.5 Description: The issue is related to Reflected Cross-Site Scripting, where generated URLs are not properly escaped before being outputted in attributes. This can lead to malicious scripts...

WordPress plugin tourmaster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-11356

The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks...

CVE-2024-11356 Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Booking

The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks...

CVE-2024-11356 Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Booking

The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks...

CVE-2024-11356

The tourmaster WordPress plugin, in versions prior to 5.3.4 , is vulnerable to Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain parameters when they are outputted on the page. This security flaw could allow unauthenticated users to perform XSS att...