CVE-2026-81778

Kalles Addons versions up to 1.0.6 are vulnerable to a Subscriber Cross Site Scripting (XSS) attack, which could allow an attacker to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk as it can lead to unauthorized actions on behalf of users or data theft. Organizations using affected versions of Kalles Addons should prioritize patching to mitigate potential exploitation.