CVE-2026-27539

Welcart e-Commerce versions up to 2.11.31 are susceptible to an unauthenticated Cross Site Scripting (XSS) vulnerability, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or defacement of the website. E-commerce operators using affected versions should prioritize remediation to protect their customers and maintain the integrity of their platforms.