CVE-2026-107160 — LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored HTML Injection via Checkout Error Message

CVE-2026-107160

LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored HTML Injection via Checkout Error Message PUBLISHED

Description (CNA)

The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.

Affected (CNA)

Vendor / product	Versions
Unknown / LTL Freight Quotes	affected 0 before 4.2.19

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/2672da6c-f494-4449-90fd-fb1c2dd78235/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.