Unrated severityNVD Advisory· Published Oct 10, 2026

CVE-2026-87780

Description

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.

Affected products

WordPress/LTL Freight Quotesllm-fuzzy
Range: <4.2.19

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/94448385-65df-4466-8251-d939275b6604/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000