CVE-2026-120365

WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerability

Published 7 Nov 2026 • Updated 7 Nov 2026

Severity: MEDIUM

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area customer-area allows Stored XSS.This issue affects WP Customer Area: from n/a through 8.4.3.

Affected products (1)

• Aguila Technologies WP Customer Area

Problem types

• Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References (1)

• https://patchstack.com/database/wordpress/plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve