CVE-2026-120205 | Thelia up to 3.0.x Customer getSummary name cross site scripting (EUVD-2026-114726)

October 31, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Thelia up to 3.0.x. The affected element is the function ForSomeCustomers::getSummary of the component Customer. Such manipulation of the argument Name leads to cross site scripting.

This vulnerability is listed as CVE-2026-120205. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More