Vulnerability Details CVE-2024-12400
The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.5%
CVSS Severity
CVSS v3 Score 7.1
References
Products affected by CVE-2024-12400
-
cpe:2.3:a:goodlayers:tour_master:-
-
cpe:2.3:a:goodlayers:tour_master:5.3.4