CVE-2026-73357

GiveWP versions prior to 4.16.6 are vulnerable to a Cross Site Scripting (XSS) flaw that could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk, potentially leading to unauthorized actions or data exposure for users interacting with affected sites. Organizations using GiveWP should prioritize updating to the latest version to mitigate this security risk.