CVE-2026-48869

8th percentile — higher than 8% of all known CVEs

Versions of Enfold <= 7.1.4 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.

This vulnerability may lead to user data theft and session hijacking, posing a significant threat to the application's security and its users.

It is recommended to update to the latest version of Enfold to mitigate this vulnerability and conduct a security audit of the application.