CVE-2026-66621

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Unauthenticated XSS vulnerability in Ultimate Dashboard versions up to 3.11.2. An attacker can inject malicious scripts that execute in the victim's browser.

Risk Assessment

Risk of data theft, session hijacking, or unauthorized actions in the context of a logged-in user.

Recommendation

Update Ultimate Dashboard to the latest patched version.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Ultimate Dashboard <= 3.11.2 versions.