Tour Master Security Vulnerabilities and Issues — Tour Master CVE List

Lucene search

GoodlayersTour Master

2 matches found

CVE•added 2025/01/06 6:15 a.m.•42 views

CVE-2024-11356

The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks.

6.1CVSS5.9AI score0.00019EPSS

CVE•added 2025/01/30 6:15 a.m.•40 views

CVE-2024-12400

The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.

7.1CVSS6.8AI score0.00049EPSS