7.1 High

CVE-2026-111838 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk ThemeHunk Customizer themehunk-customizer allows Reflected XSS.This issue affects ThemeHunk Customizer: from n/a through 2.8.7.

Affected products and versions

Product	Affected versions	Fixed in
ThemeHunk Customizer 2.8	earliest → 2.8.7	No fix stated

Do you use ThemeHunk Customizer?

Track this CVE Watch ThemeHunk Customizer Check my SBOMs

www.cveye.io/en/cve/CVE-2026-111838

Timeline

Published October 21, 2026
Last modified October 21, 2026

References

patchstack.com patchstack.com

Track this CVE