Themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental

• CVE-2026-97470 Medium 6.4 Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role 0.2%
• CVE-2026-103480 Medium 6.4 Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute 0.2%