CVE-2026-110890: WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress JetSmartFiltersto a version that resolves this vulnerability.Fixed in 3.8.6.1
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates the attacker needs low-level privileges and user interaction. The attack can be performed remotely over the network with low attack complexity.
What versions are affected?
JetSmartFilters versions through 3.8.6 are affected. The available data does not identify a fixed version.
What is the potential impact?
Successful exploitation can result in stored cross-site scripting. The CVSS vector indicates low confidentiality, integrity, and availability impact, with scope changed.