Threats tagged 'ghsa-3775-gmvc-wrxc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-122037The AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia plugin for WordPress is High7.22026-11-07GCVE DatabaseCVE-2026-122037 The AgenWebsite Shipping plugin for WordPress, versions up to and including 9.2.41, is vulnerable to stored cross-site scripting (XSS) via the 'zipcode' parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users access affected pages. Report on CVE-2026-122037 Vulnerability CWE-79 #ghsa-3775-gmvc-wrxc	GCVE Database	2026-11-07

Page 1 of 1