CVE-2026-102798

Name of the Vulnerable Software and Affected Versions ThemeREX Addons versions prior to 2.46.0

Description ThemeREX Addons trx addons contains a stored cross-site scripting (XSS) flaw, which occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing a malicious script to be permanently stored on the server and executed in the browser of other users.

Recommendations Update ThemeREX Addons to a version newer than 2.46.0.