CVE-2026-120205 - Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name
CVE ID :CVE-2026-120205 Published : Oct. 31, 2026, 5:25 p.m. | 35 minutes ago Description :Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scripts via unescaped customer names. Attackers...