Themes Vulnerabilities

Travel Tour < 5.2.4 - Reflected XSS

Description

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Proof of Concept

Affects Themes

traveltour
Fixed in 5.2.4

References

CVE
CVE-2024-11846

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
7.1 (high)

Miscellaneous

Original Researcher
Amine SAJID
Submitter
Amine SAJID
Submitter website
https://secureweb.ma
Verified
Yes
WPVDB ID
eedaf2d8-171c-4785-99cc-ab33113308d1

Timeline

Publicly Published
2024-12-11 (about 1 year ago)
Added
2024-12-11 (about 1 year ago)
Last Updated
2024-12-11 (about 1 year ago)

Other

Published
Title
Published
2025-07-28
Title
Supermalink <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-12-28
Title
Newsletters <= 4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-04-04
Title
Simple WP Events < 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-09-30
Title
WP Search Analytics < 1.4.11 - Reflected Cross-Site Scripting
Published
2025-04-24
Title
WP Custom Post Popup <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting