CVE-2026-63105: Improper Neutralization of Input During Web Page Generation

ReadyEcommerce before 4.5.2 contains a stored cross-site scripting XSS vulnerability that allows authenticated customers to inject malicious HTML payloads through the chat and support ticket messaging systems by exploiting unsanitized rendering via the v-html directive in Messages.vue,...

PT-2026-69844

Name of the Vulnerable Software and Affected Versions ReadyEcommerce versions prior to 4.5.2 Description Authenticated customers can inject malicious HTML payloads through the chat and support ticket messaging systems. This occurs due to unsanitized rendering via the v-html directive in the...