Goodlayers Tour Master vulnerabilities

• goodlayers tour master - tour booking, travel, hotel, tour master +1 more Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id Parameter CVE-2024-13369 6.5 MediumFebruary 18, 2025
• goodlayers tourmaster, tour master +1 more Tourmaster < 5.3.5 - Reflected XSS CVE-2024-12400 7.1 HighJanuary 30, 2025
• goodlayers tourmaster, tour master +1 more Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Booking CVE-2024-11356 6.1 MediumJanuary 6, 2025