CVE-2026-27426

The Automotive Car Dealership Business plugin versions up to 13.3.3 contain an unauthenticated Cross Site Scripting (XSS) vulnerability. It allows an attacker to inject malicious script without authentication.

The risk includes potential session hijacking, redirection to malicious sites, or theft of sensitive data, which could compromise organizational security and reputation.

Immediately update the plugin to the latest available version that fixes this vulnerability. Also perform a security audit of the application.