CVE-2026-103524
CVE-2026-103524
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface. User-supplied input is stored without sufficient output encoding or sanitization and is later rendered in the administrator interface and/or the web store's product pages, allowing arbitrary JavaScript execution when the affected pages are viewed. The vulnerability affects multiple administrative functions including category creation and product creation.
| Vendor | thelia |
| Product | thelia |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for thelia thelia
Be the first to know when new unknown vulnerabilities affecting thelia thelia are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Thelia / Thelia
0 ≤ 2.6.0