VULNERABILITY INTELLIGENCE

CVE-2026-24949

CVSS score7.1 HIGH

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-02-20

Last modified2026-06-17

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1.