Threats tagged 'ghsa-jgr5-377f-97mf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-116409WP Swings Upsell · Cross-site Scripting High7.12026-10-29GCVE DatabaseCVE-2026-116409 A reflected Cross-site Scripting (XSS) vulnerability exists in WP Swings Upsell Order Bump Offer for WooCommerce through version 3.1.6. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers to execute arbitrary scripts in the context of the affected website. Report on CVE-2026-116409 Vulnerability CWE-79 #ghsa-jgr5-377f-97mf	GCVE Database	2026-10-29

Page 1 of 1