CVE-2026-57426

HighCVSS 7.1

Published: 02/07/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Summary

The Modula - PRO plugin version 2.10.8 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

Risk Assessment

The risk involves the execution of arbitrary JavaScript in users' browsers, potentially leading to session theft, redirects to malicious sites, or theft of sensitive data.

Recommendation

Immediately update the Modula - PRO plugin to a version newer than 2.10.8, which includes a fix for the XSS vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions.