CVE-2026-57384

A cross-site scripting (XSS) vulnerability exists in WishList Member versions up to 3.32.0, allowing attackers to inject malicious scripts into web pages viewed by users. This can lead to unauthorized actions or data exposure, particularly affecting subscribers who interact with the compromised application. Organizations using affected versions should prioritize remediation to protect user data and maintain application integrity.