CVE-2026-66638

MediumCVSS 6.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in Frontend Admin by DynamiApps in versions up to 3.29.10. A user with Contributor role can inject malicious script.

Risk Assessment

An attacker can execute scripts in the victim's browser context, which can lead to data theft or session hijacking.

Recommendation

Update the plugin to the latest version that includes the security fix.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.