PT-2026-71621 · WordPress · Samex+1
CVE-2026-28154
·
Published
2026-08-13
·
Updated
2026-08-14
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Samex - Clean, Minimal Shop WooCommerce WordPress Theme versions prior to 2.6
M.Anh - Fashion WooCoommerce WordPress Theme versions prior to 1.8
Description
Improper neutralization of input during web page generation allows Reflected Cross-site Scripting (XSS), a flaw where an application includes untrusted data in a web page without proper validation or encoding, enabling the execution of malicious scripts in the victim's browser.
Recommendations
Update Samex - Clean, Minimal Shop WooCommerce WordPress Theme to version 2.6 or later.
Update M.Anh - Fashion WooCoommerce WordPress Theme to version 1.8 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
M.Anh
Samex