CVE-2026-119468 — Vulnerability intelligence

—

Published: 2026-11-04T13:17:26.297

CVSS

7.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noptin Newsletter Team Noptin newsletter-optin-box allows Stored XSS.This issue affects Noptin: from n/a through 4.4.2.

Sources

• CVE-2026-119468
• Original advisory