Threats tagged 'ghsa-3hhc-3pgw-rhv3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-103303The Turisbook Booking System WordPress plugin through 1.3.8 does not have authorisation and CSRF checks when saving High2026-11-08GCVE DatabaseCVE-2026-103303 The Turisbook Booking System WordPress plugin up to version 1.3.8 lacks authorization and CSRF protections when saving settings and fails to sanitize and escape one setting before displaying it in an admin page. This allows unauthenticated users to conduct stored cross-site scripting (XSS) attacks against administrators. Report on CVE-2026-103303 Vulnerability #ghsa-3hhc-3pgw-rhv3	GCVE Database	2026-11-08

Page 1 of 1