CVE-2026-114178: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Bold Grid W3 Total Cache
Affects Bold Grid W3 Total CacheSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:LWhat to do
AI-suggested
No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or limiting use of the affected plugin versions and apply standard XSS mitigations where possible.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bold GridW3 Total Cache | Affected
| Fixed in– |
Description
CVE-2026-114178 is a stored cross-site scripting (XSS) vulnerability in the Bold Grid W3 Total Cache plugin affecting versions before 2.11.0. It allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The vulnerability has a high severity with a CVSS score of 7.1.