CVE-2026-66456

The vulnerability affects the Profile Extra Fields feature in BestWebSoft versions up to 1.3.4, allowing for Subscriber Cross Site Scripting (XSS) attacks. This could enable attackers to inject malicious scripts into user profiles, potentially compromising user data and session integrity. Organizations using the affected versions should prioritize patching to mitigate the risk of exploitation.