Threats tagged 'ghsa-7j49-7w6m-5r8m'

CVE-2026-28154 is a reflected Cross-site Scripting (XSS) vulnerability affecting the snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme (up to version 2.5) and the snstheme M.Anh - Fashion WooCommerce WordPress Theme (up to version 1.7). This vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that execute in the context of a user's browser session. The vulnerability has a high severity rating with a CVSS score of 7.1. No patch or official fix information is currently available. There are no known exploits in the wild at this time.