CVE-2026-73338

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Autopay versions up to 5.0.0. An attacker can inject a malicious script that executes in the victim's browser.

Risk Assessment

Potential session theft, account takeover, or malware distribution.

Recommendation

Update Autopay to a version that includes the fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.