CVE-2026-28166 Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Tourmaster 5.4	premières → 5.4.9	Pas de correctif indiqué

Autres CVE de Tourmaster

Les 4 CVE de Tourmaster →

CVE-2025-69133 Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions 7.5 Élevée CVE-2025-48292 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 Élevée CVE-2025-32923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers… 7.1 Élevée