Goodlayers Tourmaster
4 CVEs affecting Goodlayers Tourmaster. Latest disclosed: 2026-08-24. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-48292 | High | 8.1 | 2025-05-23 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster tourmaster allow… |
CVE-2025-69133 | High | 7.5 | 2026-07-02 | Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions. |
CVE-2026-28166 | High | 7.1 | 2026-08-24 | Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions. |
CVE-2025-32923 | High | 7.1 | 2025-04-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.Thi… |