VULNERABILITY INTELLIGENCE

CVE-2025-64372

CVSS score7.1 HIGH

EPSS probability0.18%

CISA KEVNot currently listed

Published2025-12-18

Last modified2026-06-17

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shinetheme Traveler traveler allows Reflected XSS.This issue affects Traveler: from n/a through < 3.2.6.