CVE-2026-107711 | wppool FlexStock Plugin up to 3.17.2 on WordPress REST endpoint admin_enqueue_scripts products[].post_content cross site scripting

October 31, 2026 Yanac

A vulnerability has been found in wppool FlexStock Plugin up to 3.17.2 on WordPress and classified as problematic. Affected by this issue is the function admin_enqueue_scripts of the component REST endpoint. The manipulation of the argument products[].post_content leads to cross site scripting.

This vulnerability is documented as CVE-2026-107711. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More