CVE-2026-27354

Name of the Vulnerable Software and Affected Versions WooCommerce Coming Soon Product with Countdown versions through 5.0

Description The software contains a flaw related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored on the target server and executed by other users when they view the affected web page. The vulnerability exists due to insufficient input validation, potentially allowing an attacker to inject malicious code into the application.

Recommendations Update WooCommerce Coming Soon Product with Countdown to a version newer than 5.0.