CVE-2025-26918: Eniture Small Package Quotes

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows Reflected XSS.This issue affects Small Package Quotes – Unishippers Edition: from n/a through <= 2.4.9.

Affected products

• Eniture Small Package Quotes: before 2.4.10 (fixed in 2.4.10)

Published 2025-03-03. Last modified 2026-06-17.