CVE-2026-119521

The Cozmoslabs Paid Member Subscriptions WordPress plugin (versions up to and including 3.1.3 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to inject malicious s...