CVE-2026-81298 Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions

Description

Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.

Affected products and versions

Product	Affected versions	Fixed in
LeadConnector 4.0	earliest → 4.0.5	No fix stated

Other CVEs of LeadConnector

The 3 CVEs of LeadConnector →

CVE-2026-25441 Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly… 5.3 Medium CVE-2024-1371 The LeadConnector plugin for WordPress is vulnerable to unauthorized modification & loss of data due to a missing… 6.5 Medium