SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-118085

HighCVSS 7.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

8th percentile - higher than 8% of all known CVEs

Summary

GlobalPayments WooCommerce plugin versions up to 1.23.3 contain an unauthenticated Cross Site Scripting (XSS) vulnerability.

Risk Assessment

Attackers can inject malicious scripts that execute in a user's browser, potentially leading to session or data theft.

Recommendation

Update the GlobalPayments WooCommerce plugin to a version later than 1.23.3. Consider disabling the plugin until patched.

Other vulnerabilities in GlobalPayments WooCommerce

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS