The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post strips only HTML tags, a quote-breaking payload containing no angle brackets survives post save intact, and the injected script fires for every viewer of the post — including higher-privileged Editors and Administrators who routinely preview a Contributor's pending content.
The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires an administrator to have published a chart whose SQL query returns a column controllable by a lower-privileged user, such as wp_users.display_name, which a Subscriber can populate with a payload via the standard WordPress profile page at /wp-admin/profile.php.
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce that serves as the only authorization gate is publicly printed in the [saswp-reviews-form] shortcode HTML, making it obtainable by any anonymous visitor and rendering it ineffective as an access control boundary.
The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wp_ajax_nopriv_mb_template endpoint is publicly accessible without authentication, nonce verification is not enforced for the content_reply mode, and admin-ajax.php responds with Content-Type: text/html, causing browsers to execute injected tags embedded in the JSON response body.
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The sanitization bypass is further compounded by the ability to omit the data_type parameter in a modify request, which skips the HTMLPurifier branch entirely and leaves only mbw_htmlspecialchars2 encoding — fully reversed at render — as the sole barrier.
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload survives storage because the widened comment allow-list permits SVG elements with arbitrary data-* attributes; execution occurs because colibri.js, enqueued globally on every front-end page, reads the stored data-target value via jQuery.data() — which HTML-entity-decodes it — and passes the resulting string directly into jQuery(), which parses a leading '<' as HTML and fires the embedded event handler.
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media:thumbnail@url' parameter in all versions up to, and including, 5.2.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the attacker to control an external RSS feed that the target site has already configured for import; no WordPress account or special plugin configuration is needed beyond that condition.
CVE-2026-97339 is a stored cross-site scripting (XSS) vulnerability in the Complianz GDPR/CCPA Cookie Consent Banner WordPress plugin. It affects all versions up to and including 7.5.5. The vulnerability arises from insufficient input sanitization and output escaping in the comment content processed by the plugin's yotu-wp Cookie-Blocker filter. An unauthenticated attacker can inject malicious scripts that execute when users visit the affected pages. The exploit bypasses WordPress's standard comment sanitization by using allowed HTML tags and hiding executable tokens inside quoted attribute values, which are then transformed by the plugin's output filter to enable script execution. The attack requires the malicious comment to be approved before execution occurs.
The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit bypasses WordPress core's save-time kses sanitization entirely because the payload uses only kses-allowed elements — an <abbr title> attribute and <code> text content — and the XSS is introduced post-save when the plugin's output-buffer rewriter substitutes a double-quote-bearing <code> body into the <abbr title> attribute via predictable, unsalted ___noise___ placeholder keys.
The Cooked – Recipe Management WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in the [cooked-timer] shortcode content. This vulnerability exists in all versions up to and including 1.16.1 and allows authenticated users with contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.
The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon_light' Shortcode Attribute in all versions up to, and including, 5.3.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Backdrop CMS versions 1.34.x before 1.34.6 and 1.35.x before 1.35.2 have a vulnerability where uploaded SVG images are not sufficiently validated to exclude dangerous SVG tags. This can allow execution of embedded scripting if the SVG is accessed directly by URL. The risk is mitigated by the fact that SVGs are normally embedded within <img> tags, which prevents script execution, and the attacker must have upload privileges. The vulnerability is rated medium severity with a CVSS score of 5.3.
CVE-2026-104828 is a cross-site scripting (XSS) vulnerability in htmlunit-neko, an adaptation of NekoHTML used by HtmlUnit. Versions prior to 5.4.0 improperly handle TEXTAREA and TITLE element content by writing decoded character data without entity encoding. This causes entity references inside these elements to be decoded and emitted as raw markup during parse-and-serialize operations, potentially allowing attacker-controlled encoded text to become executable markup in browsers. The issue is fixed in version 5.4.0.
If a certain set of MathML tags are enabled, an attacker can inject arbitrary JavaScript code into the user's browser.
The `annotation-xml` tag has slightly different behavior than the other "integration point"
tags in MathML and SVG, but ammonia didn't handle it, so it didn't correctly
strip the namespace-incompatible tags.
This vulnerability only has an effect when the `math` and `annotation-xml` tags
are both enabled, but the `encoding` attribute is disabled, because it relies
on the following sequence of steps:
1. User writes code like `<math><annotation-xml encoding="text/html"><gadget></annotation-xml></math>`.
2. Namespace filtering checks the DOM, and it passes. `<gadget>` is parsed as HTML.
3. Attribute filter strips it down to `<math><annotation-xml><gadget></annotation-xml></math>`. Because the encoding attribute is gone, `<gadget>` is now parsed as MathML.
4. The gadget is written in such a way that it exploits the parsing differences between HTML and MathML.
Additionally, the gadget can only be written using a tag that is parsed as raw text in HTML.
These [elements] are:
* title
* textarea
* xmp
* iframe
* noembed
* noframes
* plaintext
* noscript
* style
* script
Applications that do not explicitly allow any of these tags should not be affected, since none are allowed by default.
[elements]: https://github.com/servo/html5ever/blob/045a0378f2b0f8d4a350793899cf722a2a9b3d11/html5ever/src/tree_builder/rules.rs
### Impact
Low: Requires both MathML and at least one raw-text HTML tag to be enabled, and most websites don't enable either of those.
### Patches
- https://github.com/rust-ammonia/ammonia/pull/245 (released in 4.1.3)
- https://github.com/rust-ammonia/ammonia/pull/244 (released in 4.0.2)
- https://github.com/rust-ammonia/ammonia/pull/243 (released in 3.3.2)
### Workarounds
Call <code>builder.[add_clean_content_tags](https://docs.rs/ammonia/latest/ammonia/struct.Builder.html#method.add_clean_content_tags)("annotation-xml")</code> to remove the annotation-xml element and all of its children, including the XSS gadget.
A persistent cross-site scripting (XSS) vulnerability exists in GYM One gym management software versions prior to 1.4.1. The vulnerability occurs because the admin/users/index.php page renders user profile fields (firstname, lastname, email) without proper HTML encoding. An attacker able to store malicious script code in these fields can execute arbitrary scripts in an administrator's browser when they view the user list, potentially compromising administrator session data and privileges. This issue is fixed in version 1.4.1.
A cross-site scripting (XSS) vulnerability exists in the HeliumEdu platform prior to version 2.2.60. Authenticated users can upload SVG and HTML attachments via the POST /planner/attachments/ endpoint because these formats are not blocked. Uploaded SVG files served as image/svg+xml can execute embedded scripts when accessed via their public URLs, enabling persistent attacker-controlled active content and phishing. The attachment storage is on a separate origin, preventing script access to application cookies or session data. This vulnerability is fixed in version 2.2.60.
CVE-2026-57568 is a cross-site scripting (XSS) vulnerability in Lychee, an open-source photo-management tool. Versions prior to 7.6.0 allow authenticated users with album-edit permissions to inject JavaScript URIs in album or photo Markdown descriptions due to unsafe link allowance. This malicious script is rendered and executed when a visitor, including unauthenticated users, clicks the link in a public album. The vulnerability can lead to session data exposure or unauthorized authenticated requests in the victim's browser context. This issue is fixed in Lychee version 7.6.0.
CVE-2026-97667 is a medium severity cross-site scripting (XSS) vulnerability in Sonatype Nexus Repository 3. It allows a user with edit permission on a hosted R repository to inject script content into the metadata of an uploaded R package. This script executes in the browser of any user who views the package details, running with the permissions of the viewing user. Both authenticated and anonymous users (if granted permission) can exploit this. The vulnerability affects versions from 3.28.0 up to but not including 3.97.0.
CVE-2026-111096 is a stored cross-site scripting (XSS) vulnerability in JetBrains TeamCity affecting versions before 2026.2, 2026.1.4, and 2025.11.8. This vulnerability allows an attacker with limited privileges and user interaction to inject malicious scripts into the classic build log. The vulnerability has a medium severity with a CVSS score of 6.7.