← All advisories

Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2026-27404

Description

Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.

Affected products

1

WordPress/Lmsllm-fuzzy
Range: <=9.7
Package: https://wordpress.org/themes/lms

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/lms/vulnerability/wordpress-lms-theme-9-7-reflected-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.