CVE-2026-109590 | magepeopleteam Tour Booking Manager Plugin up to 2.3.6 on WordPress Shortcode Attributes ttbm_hotel_map_shortcode width/height/zoom cross site scripting

October 28, 2026 Yanac

A vulnerability identified as problematic has been detected in magepeopleteam Tour Booking Manager Plugin up to 2.3.6 on WordPress. This affects the function ttbm_hotel_map_shortcode of the component Shortcode Attributes. This manipulation of the argument width/height/zoom causes cross site scripting.

This vulnerability is registered as CVE-2026-109590. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More