Skip to content
OpenAdvisories

Vendor

mauriceboe

11 known vulnerabilities.

Products

TREK 11
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-54505

    TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner

    TREK is a collaborative travel planner. Prior to 3.1.0, when the Journey add-on is enabled, TREK interpolates the unescaped activeSuggestion.title value into journey.frontpage.suggestionText through client/src/i18n/TranslationContext.tsx and renders the resul…

    mauriceboe TREK
  • Low 3.7
    CVE-2026-40184

    Unauthenticated Access to Uploaded Files in TREK

    TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.

    mauriceboe TREK