Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-28040 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stor… https://www.cve.org/CVERecord?id=CVE-2026-28040
Post summary
The text announces a Cross‑Site Scripting flaw in Magepeople’s Taxi Booking Manager for WooCommerce, describing improper input neutralization during page rendering.
CVE-2026-28040 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi B... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28040
Post summary
CVE‑2026‑28040 is a stored XSS vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce; the post announces the issue but provides no PoC, exploitation tools, active attack reports, or patches.