CVE-2026-27536 Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions

Description

Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
MailChimp Subscribe Forms 4.3	earliest → 4.3.3	No fix stated

Other CVEs of MailChimp Subscribe Forms

The 3 CVEs of MailChimp Subscribe Forms →

CVE-2025-22727 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps… 6.5 Medium CVE-2024-43211 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps… 5.9 Medium