All 2 CVE vulnerabilities found in Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental, with AI-generated Chinese analysis, references, and POCs.
Vendor: themefic
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-97470 | Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role CWE-79 | 6.4 | Medium | 2026-10-16 |
| CVE-2026-103480 | Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute CWE-79 | 6.4 | Medium | 2026-10-16 |
All 2 known CVE vulnerabilities affecting Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental with full Chinese analysis, references, and POCs where available.