CVE-2026-95608

HighCVSS 7.1

Published: 09/10/2026(UTC)Updated: 11/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Reflected XSS vulnerability in the HUSKY plugin. Affects versions from n/a through 1.4.3.2.

Risk Assessment

An attacker can inject malicious script into the page, potentially leading to data theft or session hijacking.

Recommendation

Update the HUSKY plugin to the latest available version that includes the security fix.

Other vulnerabilities in HUSKY

See all

CVE-2026-116401High
The HUSKY plugin in versions up to 1.4.6 contains an unauthenticated Broken Access Control vulnerability. An attacker can bypass access control mechanisms and perform unauthorized actions.
CVE-2026-115947Medium
Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS