Description
Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeMove | EduMall | ≤ 4.5.3 | — |
High · 7.1
CVE-2026-39748
EUVD-2026-93257GHSA-qj45-xphp-vcfg
WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack