CVE-2026-104479 | Mindstellar Shopclass up to 6.1.x TinyMCE ItemActions.php cross site scripting

October 3, 2026 Yanac

A vulnerability identified as problematic has been detected in Mindstellar Shopclass up to 6.1.x. Affected is an unknown function of the file ItemActions.php of the component TinyMCE. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-104479. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More