CVE-2026-57313

Cross Site Scripting (XSS) vulnerability in SureCart plugin versions up to 4.2.2, allowing a subscriber-level user to inject malicious script.

An attacker can steal session data, redirect users to malicious sites, or perform other unauthorized actions in the victim's browser context.

It is recommended to immediately update the SureCart plugin to version 4.2.3 or later, which includes a fix for this vulnerability.