Threats tagged 'ghsa-3rwh-2x2v-9479'

The Tour Booking Manager plugin for WordPress versions up to and including 2.3.6 is vulnerable to stored cross-site scripting (XSS) via the 'width', 'height', and 'zoom' shortcode attributes of the [ttbm-hotel-map] shortcode. This vulnerability arises from insufficient input sanitization and output escaping in the ttbm_hotel_map_shortcode() function, allowing authenticated users with contributor-level access or higher to inject arbitrary scripts that execute when the affected page is viewed.