PT-2026-4460
CVE-2026-24630
·
Published
2026-01-09
·
Updated
2026-01-24
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Stylish Cost Calculator versions through 8.1.8
Description
The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting (XSS) issue. This specific instance allows for Stored XSS, meaning malicious scripts can be stored and executed by other users. The vulnerability exists because the application does not adequately sanitize input, potentially allowing attackers to inject malicious code into web pages viewed by other users.
Recommendations
Update Stylish Cost Calculator to a version later than 8.1.8.
Found an issue in the description? Have something to add? Feel free to write us 👾