VULNERABILITY INTELLIGENCE

CVE-2026-27086

CVSS score6.5 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2026-09-04

Last modified2026-09-07

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS. This issue affects WoodMart: from n/a before 8.3.8.