Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-103899

1 brief RSS
medium advisory

Stored XSS in The EU VAT Assistant for WooCommerce Plugin

An unauthenticated Stored Cross-Site Scripting vulnerability in The EU VAT Assistant for WooCommerce plugin (<= 2.1.30.260413) allows attackers to inject malicious scripts that execute in the administrator's context, potentially leading to account takeover.

The EU VAT Assistant for WooCommerce xss wordpress web-vulnerability cve-2026-103899
2t 1c