CVE-2026-66570

Name of the Vulnerable Software and Affected Versions Nickboss WordPress File Upload versions prior to 5.2.1

Description Stored Cross-site Scripting (XSS) occurs when an application includes untrusted data in a web page without proper validation or encoding. This allows an attacker to inject malicious scripts that execute in the browsers of visitors, potentially leading to session hijacking or unauthorized actions on behalf of the user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.