Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwcty_current_date' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-0703 Stored Cross-Site Scripting in NextMove Lite Thank You Page Plugin 2.23.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0703
Post summary
The text announces CVE-2026-0703 as a stored XSS flaw in NextMove Lite Thank You Page Plugin 2.23.0, providing only basic technical details without evidence of exploitation or mitigation.