Cpe:2.3:a:themehunk:customizer:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3athemehunkcustomizer/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 16:08:42 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgThemeHunk Customizer: Reflected Cross-Site Scripting (CVE-2026-111838)https://feed.craftedsignal.io/briefs/2026-10-themehunk-xss/Wed, 21 Oct 2026 16:08:42 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-themehunk-xss/ThemeHunk Customizer versions from n/a through 2.8.7 are affected by a Reflected Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.<p>ThemeHunk Customizer (versions up to 2.8.7) contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. This vulnerability allows for Reflected XSS.</p> highadvisory