CVE-2026-28166 | GoodLayers Tourmaster Plugin up to 5.4.9 on WordPress cross site scripting

A vulnerability was found in GoodLayers Tourmaster Plugin up to 5.4.9 on WordPress. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-28166. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More