tourcms
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Tour & Activity Operator Plugin for TourCMS | 1 | – | Mar 21, 2026 |
Exploited and recent CVEs
- CVE-2026-1806 Tour & Activity Operator Plugin for TourCMS <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%