CVE-2026-109973 | oxilab Image Hover Effects Ultimate Visual Composer Plugin Image Upload Rendering inc/Style22.php default_render cross site scripting

A vulnerability marked as problematic has been reported in oxilab Image Hover Effects Ultimate Visual Composer Plugin up to 3.1.1 on WordPress. Affected by this vulnerability is the function Style22::register_child/Style22::default_render of the file inc/Style22.php of the component Image Upload Rendering. Performing a manipulation of the argument flip-box-image-upload-url-01-alt results in cross site scripting.

This vulnerability is reported as CVE-2026-109973. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More