CVE-2026-103527 | Thelia up to 2.6.0 Smarty Templates address.html next cross site scripting

October 12, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Thelia up to 2.6.0. This affects an unknown function of the file address.html of the component Smarty Templates. The manipulation of the argument Next leads to cross site scripting.

This vulnerability is listed as CVE-2026-103527. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More