CVE-2026-83562

WCFM Marketplace versions up to 3.8.2 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This could lead to unauthorized actions being performed on behalf of users or the theft of sensitive information. E-commerce platforms and website administrators using affected versions should prioritize patching this vulnerability to safeguard their users and maintain the integrity of their applications.