CVE-2026-62093
HighCVSS 7.1Summary
Unauthenticated Cross Site Scripting (XSS) in TechOne versions up to 3.0.3. Allows an attacker to inject malicious scripts into a victim's browser.
Risk Assessment
An attacker can steal user sessions, intercept data, or conduct phishing attacks, threatening data confidentiality and integrity.
Recommendation
Update TechOne to the latest version. Additionally, apply input filtering and output encoding to prevent XSS.
Other vulnerabilities in TechOne
See all- CVE-2026-62094High
Unauthenticated Local File Inclusion (LFI) in TechOne versions up to 3.0.3. Allows an attacker to read files from the server without authentication.
- CVE-2026-39625Medium
The WordPress theme TechOne (techone) by kutethemes has a basic XSS vulnerability due to improper neutralization of script-related HTML tags. This allows code injection and affects versions up to and including 3.0.3.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS