Skip to content
OpenAdvisories
High · 7.1 CVE-2026-95608 EUVD-2026-95597GHSA-6qw3-gfg3-x24r

WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Published Oct 9, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

Affected products

VendorProductAffectedFixed
PluginUs.Net HUSKY ≤ 1.4.3.2 —

References