CVE-2026-120597 — Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross-site scripting

According to the CERT title, CVE-2026-120597 concerns cross-site scripting in error_page_message in paymentESCOTT.main.class.php of the Welcart e-Commerce Plugin.