← All advisories

High severity7.1NVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

CVE-2026-27404

CVE-2026-27404

Description

Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.

Affected products

1

WordPress/Lmsllm-fuzzy
Range: <=9.7
Package: https://wordpress.org/themes/lms

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/lms/vulnerability/wordpress-lms-theme-9-7-reflected-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.