CVE-2026-28175

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Visitors Traffic Real Time Statistics versions up to 8.11, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or defacement of the affected application. Organizations using this software should prioritize remediation to protect against potential exploitation.