CVE-2026-39722

WPLMS versions up to 4.972 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to session hijacking, data theft, or defacement of the website. Organizations using WPLMS should prioritize patching this issue to mitigate potential exploitation risks.