SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-81778

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

7th percentile - higher than 7% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in Kalles Addons up to version 1.0.6. A subscriber-level attacker can inject malicious scripts.

Risk Assessment

Potential for script execution in victim's browser, leading to session theft, account takeover, or other attacks.

Recommendation

Update the Kalles Addons plugin to the latest patched version.

Other vulnerabilities in Kalles Addons

Original NVD description (English source)

Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS