CVE-2026-32333

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

The Mayosis Core plugin versions up to 5.4.7 contain an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker without logging in can inject malicious scripts into pages.

Risk Assessment

The risk includes the possibility of executing malicious code in the user's browser, which could lead to session theft, data phishing, or malware distribution.

Recommendation

It is recommended to update the Mayosis Core plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.