CVE-2026-68567

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Convert Pro versions up to 1.0.1. An attacker can inject a malicious script that executes in the victim's browser.

Risk Assessment

Potential session theft, account takeover, or malware distribution.

Recommendation

Update Convert Pro to a version that includes the fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.