CVE-2026-65440

HighCVSS 7.1

Published: 27/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

XSS vulnerability in GetGenie up to version 4.4.3. An unauthenticated attacker can inject malicious JavaScript.

Risk includes session theft, redirection to malicious sites, or theft of sensitive data.

Update the GetGenie plugin to the latest version.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.