CVE-2026-111314 | cservit Affiliate-Toolkit Plugin up to 3.9.2 on WordPress AJAX handler atkp_product_producturl cross site scripting (EUVD-2026-111563)

October 28, 2026 Yanac

A vulnerability marked as problematic has been reported in cservit Affiliate-Toolkit Plugin up to 3.9.2 on WordPress. This affects an unknown function of the component AJAX handler. The manipulation of the argument atkp_product_producturl leads to cross site scripting.

This vulnerability is referenced as CVE-2026-111314. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More