high8.8
CVE-2026-87780
The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and…
Impact
The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.
Affected products
| Product | Affected versions |
|---|---|
| LTL Freight Quotes WordPress Plugin | before 4.2.19 |
Versions were read from the advisory text. No structured product data has been published for this record yet.