CVE-2026-57373

Funnel Kit Funnel Builder PRO versions up to 3.15.0.4 are vulnerable to a Customer Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk as it could lead to unauthorized data access or manipulation, impacting user trust and data integrity. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.