CVE-2026-27367

CVE-2026-27367 is a reflected XSS in the ThemeGoods Musico WordPress theme. Public description confirms an improper neutralization of input during web page generation, enabling Reflected XSS against Musico versions prior to 3.4.5. Affected product: ThemeGoods Musico (WordPress Theme) with the vul...