Description
Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kriesi | Enfold | ≤ 7.1.4 | — |
High · 7.1
CVE-2026-48869
EUVD-2026-37494GHSA-2vvp-wxcw-3455
WordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack