CVE-2026-62091

Received Received - Intake

Unauthenticated XSS in Armania <= 1.4.8

Publication date: 2026-10-10

Last updated on: 2026-10-10

Assigner: Patchstack

Description

Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-10

Generated

2026-10-11

AI Q&A

2026-10-11

EPSS Evaluated

N/A

NVD

CVE-2026-62091

EUVD

EUVD-2026-96494

Affected Vendors & Products

Vendor	Product	Version / Range
kutethemes	Armania	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This is an Unauthenticated Cross Site Scripting (XSS) vulnerability in the Armania WordPress theme versions up to and including 1.4.8. It allows attackers to inject malicious scripts into web pages viewed by users. Exploitation requires user interaction, such as clicking a malicious link.

Detection Guidance

Check for the presence of Armania theme version 1.4.8 or lower. Inspect web server logs for unusual input patterns or script injections in URLs or form submissions. Use security tools like Wordfence or Patchstack to scan for XSS vulnerabilities.

Impact Analysis

Attackers can steal visitor data, hijack accounts, or perform actions on behalf of users. Since it affects a widely used WordPress theme, it could be exploited in mass campaigns targeting thousands of websites. Immediate action is advised to mitigate risks.

Mitigation Strategies

Apply the Patchstack mitigation rule if available. Temporarily disable the Armania theme if an update is not available. Contact your hosting provider or developer for assistance. Monitor for suspicious activity and restrict user roles with elevated privileges.

Hi! I’m here to help you understand CVE-2026-62091. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70