Tour & Activity Operator Plugin for TourCMS

Vulnerabilities 1Slug tour-operator-pluginLatest version 1.7.0WordPress.org →Closed

N/A Unfixed Closed

2026-03-20≤ 1.7.0

Tour & Activity Operator Plugin for TourCMS <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes