CVE-2026-57706

Dokan Lite versions up to and including 5.0.6 are vulnerable to a reflected cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability could allow attackers to execute arbitrary scripts in the context of a user's browser, potentially leading to data theft or session hijacking. Organizations using affected versions of Dokan should prioritize patching to mitigate the risk of exploitation.