Threats tagged 'ghsa-wf57-jg94-8h6g'

CVE-2026-66711 is a high-severity cross-site scripting (XSS) vulnerability affecting WooCommerce Multilingual & Multicurrency versions up to and including 5.5.6. The flaw involves improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. This vulnerability requires user interaction (UI:R) but does not require privileges (PR:N) and can impact confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.