TA
Product
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental
2
CVEs
0
On KEV
6.4
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97470 | 6.4 | Oct 16 | Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role Affected: through 3.0.1 |
| CVE-2026-103480 | 6.4 | Oct 16 | Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute Affected: through 3.0.1 |
Showing 2