Travelfic Toolkit, CVE-2025-39585

CVE, Research URL: CVE-2025-39585
Home page URL: Security reports for Travelfic Toolkit
Application: Travelfic Toolkit
Published on: Apr 16, 2025
Research Description: Tourfic Toolkit [travelfic-toolkit] < 1.2.3 CVE-2025-39585 [en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Travelfic Toolkit allows Stored XSS. This issue affects Travelfic Toolkit: from n/a through 1.2.1.
Affected versions: Min -, max 1.2.3.
Status: vulnerable