CVE-2026-88043: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in kitae-park Mang Board

CVE-2026-88043 describes a stored cross-site scripting vulnerability in the Mang Board WordPress plugin affecting versions up to 2.4.0. The flaw exists due to improper neutralization of input in the 'data_type' parameter, enabling attackers to inject arbitrary web scripts that execute in the context of users visiting the affected pages. This vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality and integrity with no impact on availability.

Successful exploitation of this vulnerability could allow unauthenticated attackers to execute arbitrary scripts in the context of users visiting the affected pages, potentially leading to theft of sensitive information or session hijacking. The vulnerability impacts confidentiality and integrity but does not affect availability.

No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or removing the Mang Board plugin or restricting access to affected functionality to trusted users only.