CVE-2026-84765

The vulnerability allows unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT versions up to 7.5.1, potentially enabling attackers to execute arbitrary scripts in the context of a user's session. This could lead to data theft, session hijacking, or defacement of web content. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.