← Database

CVE-2022-27859

MEDIUM CVSS: 4.1 Published: 2022-06-15 Modified: 2026-06-17

Description

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark d.o.o. Travel Management plugin <= 2.0 at WordPress.

Affected Platforms

Nicdark Nd-Travel

Weakness Type

CWE-79

References