← العودة للجدول
CVE-2026-103899
CVE-2026-103899 — The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Store
📅 2026-10-17
🟠 High 🔥 No NVD Vulnerability WordPress CVSS 7.2

📋 الوصف الكامل

The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, and including, 2.1.30.260413 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an inje

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-103899

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.1.30

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←