CVE-2026-66667

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Templately versions up to 3.7.1. An attacker can inject a malicious script that executes in the victim's browser.

Risk Assessment

Potential session theft, account takeover, or malware distribution.

Recommendation

Update Templately to a version that includes the fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.