CVE-2026-115548

Name of the Vulnerable Software and Affected Versions Quttera ThreatSign – Web Malware Scanner for WordPress versions prior to 4.1.0.49

Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. By manipulating the HTTP USER AGENT parameter, an attacker can inject arbitrary web scripts into pages that execute when accessed by an administrator.

Recommendations Update Quttera ThreatSign – Web Malware Scanner for WordPress to version 4.1.0.49 or later.