Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 6 min 160 bronnen 2 kritiek 32 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-121862

HIGH · 8.8 CVSS Gepubliceerd: CWE-79

Beschrijving

The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, and publishes them without moderation, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against any visitor of the affected posts, including administrators.

References