{"id":"CVE-2026-107160","published":"2026-10-14T07:17:01.570","lastModified":"2026-10-14T16:14:02.800","description":"The LTL Freight Quotes  WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwes":["CWE-345"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/2672da6c-f494-4449-90fd-fb1c2dd78235/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}