Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 11 min 161 bronnen 4 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-103305

HIGH · 8.8 CVSS Gepubliceerd: CWE-79

Beschrijving

The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.

References