Threats tagged 'ghsa-7h59-5f8r-wcwf'

CVE-2026-66703 is a cross-site scripting (XSS) vulnerability in the properfraction MailOptin plugin affecting versions up to and including 1.2.78.0. This vulnerability allows improper neutralization of input during web page generation, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability requires low attack complexity but some privileges and user interaction. No official patch or remediation guidance is currently available.