CVE-2026-84815
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold allows Reflected XSS. This issue affects Enfold: from n/a through 8.0.
- Published Sep 3, 2026
- CVSS 5.8 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)