CVE-2026-87780

Name of the Vulnerable Software and Affected Versions LTL Freight Quotes versions prior to 4.2.19

Description An issue exists where values submitted through an unauthenticated endpoint are not properly sanitized or escaped before being stored and subsequently displayed on an administrative page. This leads to Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the server and executed in the session of any administrator who views the affected page.

Recommendations Update LTL Freight Quotes to version 4.2.19 or later.