CVE-2026-103080

8th percentile - higher than 8% of all known CVEs

External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1.3.0.

An attacker can modify parameters that should be immutable, potentially leading to unexpected application behavior or business logic bypass. Versions up to and including 1.3.0 are affected.

Update the Salevo plugin to a version later than 1.3.0. Implement server-side parameter validation and do not rely on client-supplied values.