CVE-2026-57417

The RexTheme Cart Lift plugin is vulnerable to stored cross-site scripting (XSS) due to improper input neutralization during web page generation, affecting versions up to and including 3.1.57. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of users' browsers, potentially compromising user data and session integrity. Organizations using this plugin should prioritize patching to mitigate the risk of exploitation.