CVE Catalog
CVE-2026-32556
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
Unauthenticated Cross Site Scripting (XSS) vulnerability in Boost versions up to and including 2.0.4.
Risk Assessment
An unauthenticated attacker can inject malicious scripts, potentially leading to data theft or session hijacking.
Recommendation
Update the Boost plugin to the latest patched version.
Other vulnerabilities in Boost
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.