CVE-2026-66667 Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
Templately 3.7	earliest → 3.7.1	No fix stated

Other CVEs of Templately

The 6 CVEs of Templately →

CVE-2026-42379 Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded… 7.7 High CVE-2025-49408 Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded… 10.0 Critical CVE-2024-47308 Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a… 6.5 Medium CVE-2024-50423 Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access… 5.4 Medium