Vulnerabilidades en teamfunnelkit

2 resultados
CVE-2026-100147HIGHFunnelKit <= 3.16.0.5 - Unauthenticated Stored Cross-Site Scripting via Order Fields (shipping/billing)EPSS 0.3%CVE-2026-107746HIGHFunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST ParameterEPSS —