PT-2025-52185 · Unknown · Shinetheme Traveler
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
shinetheme Traveler versions prior to 3.2.6
Description
The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting (XSS) issue. This allows for the execution of malicious scripts through a web page. The vulnerability exists due to insufficient sanitization of user-supplied input. The affected component is shinetheme Traveler.
Recommendations
Update shinetheme Traveler to version 3.2.6 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Shinetheme Traveler