CVE-2026-62091
HighCVSS 7.1Summary
Unauthenticated Cross Site Scripting (XSS) in Armania versions up to 1.4.8. Allows an attacker to inject malicious scripts into a victim's browser.
Risk Assessment
An attacker can steal user sessions, intercept data, or conduct phishing attacks, threatening data confidentiality and integrity.
Recommendation
Update Armania to the latest version. Additionally, apply input filtering and output encoding to prevent XSS.
Other vulnerabilities in Armania
See all- CVE-2026-62092High
Unauthenticated Local File Inclusion (LFI) in Armania versions up to 1.4.8. Allows an attacker to read files from the server without authentication.
- CVE-2026-39626Medium
The Armania theme for WordPress has a basic XSS vulnerability due to improper neutralization of script-related HTML tags. This affects versions up to and including 1.4.8.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS