CVE-2026-104119

The Simple Shopping Cart WordPress plugin, in versions prior to 5.2.6 , contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly escape certain settings field values before they are displayed on an admin settings page. This flaw allows high-privilege u...