CVE-2026-8308

The vulnerability in the Polen Media Software and Information Services Website Template prior to version 2 allows for reflected cross-site scripting (XSS) due to improper input neutralization during web page generation. This could enable attackers to execute arbitrary scripts in the context of a user's browser session, potentially leading to data theft or session hijacking. Organizations using this template should prioritize remediation to protect against potential exploitation.