Description
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QODE | Qode Music | ≤ 2.1.8.2 | — |
High · 7.1
CVE-2026-42631
EUVD-2026-96433GHSA-jcmq-hm39-fp26
WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack