CVE-2026-66703

MailOptin versions up to 1.2.78.0 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, allowing attackers to inject malicious scripts that could execute in the context of a user's browser. This vulnerability poses a medium risk, potentially leading to unauthorized actions or data exposure for users interacting with the compromised application. Organizations using affected versions should prioritize remediation to protect their users from potential exploitation.