CVE-2026-27086

MediumCVSS 6.5

Published: 04/09/2026(UTC)Updated: 07/09/2026(UTC)Translated: 04/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

DOM-Based XSS vulnerability in the WoodMart theme by Xtemos. Improper neutralization of input during web page generation. Affects versions before 8.3.8.

Risk Assessment

Risk of malicious script execution in the user's browser, potentially leading to data theft or session hijacking.

Recommendation

Update the WoodMart theme to version 8.3.8 or later, which includes a fix.

Other vulnerabilities in WoodMart

CVE-2025-49936Medium
DOM-Based XSS vulnerability in WoodMart theme before version 8.3.2. An attacker can exploit it to execute a script in the victim's browser.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS. This issue affects WoodMart: from n/a before 8.3.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS