Skip to content
OpenAdvisories
High · 7.1 CVE-2026-124254 EUVD-2026-126050GHSA-9xcg-jm89-xrc6

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exactly WWW LLC EWWW Image Optimizer …

Published Nov 15, 2026 · Assigned by Patchstack

Vendor: Exactly WWW Product: EWWW Image Optimizer

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exactly WWW LLC EWWW Image Optimizer ewww-image-optimizer allows Stored XSS.This issue affects EWWW Image Optimizer: from n/a through 8.9.1.

Affected products

VendorProductAffectedFixed
Exactly WWW EWWW Image Optimizer 0 ≤8.9.1 —

References