Unknown tourmaster

• CVE-2026-14240 Medium 5.3 Tourmaster < 5.4.9 - Unauthenticated Sensitive Data Disclosure via Order Export 0.3%
• CVE-2026-14239 High 7.1 Tourmaster < 5.4.8 - Stored XSS via CSRF 0.1%
• CVE-2024-12400 High 7.1 Tourmaster < 5.3.5 - Reflected XSS 0.3%
• CVE-2024-11356 Medium 6.1 Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Booking 0.4%