CVE-2026-81282

Summary

Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.

Affected Software

VendorProductVersion RangeStatus
VillaThemeProduct Variations Swatches for WooCommercen/a <= 1.1.18affected

Weaknesses

  • CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References