CVE-2026-33400 | ellite Wallos up to 4.6.x Statistics Page payment cross site scripting

A vulnerability has been found in ellite Wallos up to 4.6.x and classified as problematic. The affected element is the function payment of the component Statistics Page. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2026-33400. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.