~ / search / CVE-2026-54861

CVE-2026-54861

WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

State: published CNA: Patchstack CVSS 3.1 7.1 High NVD: deferred

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area customer-area allows Reflected XSS.This issue affects WP Customer Area: from n/a through 8.4.1.

Affected products

VendorProductVersions
Aguila Technologies WP Customer Area ≤8.4.1

References

External links from the record. They lead to third-party sites.