Skip to content

CVE record · 1 source

CVE-2026-120205

CVSS 8.0

Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to…

Vendor: Thelia
Product: Thelia, Thelia Core
CVSS v3.1: 8.0 AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Weakness: CWE-79

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 14h ago

Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to…

Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scripts via unescaped customer names. Attackers can register with a script…

CVSS 8.0 CVE-2026-120205 Thelia