Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-78289 2 Loftocean, Wordpress 2 Cozystay, Wordpress 2026-08-27 7.1 High
Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.
CVE-2025-67988 2 Loftocean, Wordpress 2 Cozystay, Wordpress 2026-04-15 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through < 1.9.1.