Travelmanager Buchungssoftware Security & Risk Analysis

The plugin "travelmanager-buchungssoftware" v22.27 exhibits a concerning security posture, primarily due to a large number of unprotected AJAX handlers. While the absence of known CVEs and the use of prepared statements for SQL queries are positive indicators, the significant attack surface exposed without proper authentication checks presents a substantial risk. The static analysis revealed 18 AJAX handlers lacking authentication, and the taint analysis identified 5 flows with unsanitized paths, indicating a potential for unauthorized data manipulation or execution. The complete lack of nonce checks and capability checks on these entry points exacerbates the risk, making it easier for attackers to trigger malicious actions. The low percentage of properly escaped output further suggests a vulnerability to cross-site scripting (XSS) attacks. Despite the lack of historical vulnerabilities, the current codebase contains critical weaknesses that need immediate attention.