CVE-2025-26878

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in patternsinthecloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows DOM-Based XSS.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through...

CVE-2025-26878

CVE-2025-26878 is an authenticated (Contributor+) stored DOM-based XSS vulnerability in Autoship Cloud for WooCommerce Subscription Products, affecting versions up to 2.8.0.1. Technical details confirm a cross-site scripting issue triggered via input during web page generation. The connected docu...