CVE-2026-28154

Name of the Vulnerable Software and Affected Versions Samex - Clean, Minimal Shop WooCommerce WordPress Theme versions prior to 2.6 M.Anh - Fashion WooCoommerce WordPress Theme versions prior to 1.8

Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting (XSS), a flaw where an application includes untrusted data in a web page without proper validation or encoding, enabling the execution of malicious scripts in the victim's browser.

Recommendations Update Samex - Clean, Minimal Shop WooCommerce WordPress Theme to version 2.6 or later. Update M.Anh - Fashion WooCoommerce WordPress Theme to version 1.8 or later.