A vulnerability was found in WHMCSdes Phox Hosting Plugin up to 2.0.8 on WordPress and classified as problematic. Affected is an unknown function. Executing a manipulation can lead to cross site scripting.
This vulnerability appears as CVE-2026-25013. The attack may be performed from remote. There is no available exploit.
