CVE-2026-28127

Name of the Vulnerable Software and Affected Versions e-plugins Lawyer Directory versions through 1.3.2

Description The software contains a flaw related to improper input handling during web page creation, which allows for Reflected Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages viewed by users. The vulnerability exists due to insufficient sanitization of user-supplied input. The affected component is the Lawyer Directory.

Recommendations Update Lawyer Directory to a version newer than 1.3.2.