CVE-2026-54505 | liketrek TREK up to 3.0.x Journey Page JourneyPage.tsx getSuggestions Title cross site scripting

A vulnerability classified as problematic has been found in liketrek TREK up to 3.0.x. Affected by this vulnerability is the function getSuggestions of the file client/src/pages/JourneyPage.tsx of the component Journey Page. Performing a manipulation of the argument Title results in cross site scripting.

This vulnerability is reported as CVE-2026-54505. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More