Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.2%	CVE-2026-103899EU VAT Assistant for WooCommerce · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in… High7.2EPSS 0.2%2026-10-17CVE Database V5CVE-2026-103899 The EU VAT Assistant for WooCommerce WordPress plugin is vulnerable to stored cross-site scripting (XSS) via the 'vat_number' parameter in all versions up to and including 2.1.30.260413. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute in the administrator's browser when reviewing orders, potentially leading to privilege escalation and full site takeover through rogue administrator account creation. EPSS 0.2%Vulnerability daigo75 #cwe-79	CVE Database V5	2026-10-17

Showing 1–1 of 1 result