Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through <= 3.6.32.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| My Auctions Allegro Free Edition Plugin | — | Update my-auctions-allegro-free-edition plugin to version 3.6.33, or a newer patched version | Jan 28, 2026 | Jan 19, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub