CVE-2026-103904 | JTL-Software JTL-Shop up to 5.6.4/5.7.4/5.8.1 Public Consent Endpoint cross site scripting

October 14, 2026 Yanac

A vulnerability has been found in JTL-Software JTL-Shop up to 5.6.4/5.7.4/5.8.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Public Consent Endpoint. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-103904. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More