Threats Tagged 'cve-2026-65048'
View all threats tagged with 'cve-2026-65048'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-65048'
Click on any threat for detailed analysis and mitigation recommendations
0 Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains a critical unauthenticated stored cross-site scripting (XSS) vulnerability in its Repeatable Fieldset feature. The vulnerability arises because the parseSubmissionIndex() function accepts arbitrary strings without numeric validation, and admin_form_element() inserts these strings into HTML without escaping. An attacker can exploit this by submitting a crafted form that injects malicious scripts, which execute in the administrator's browser when viewing submissions. This can lead to session cookie theft, unauthorized creation of administrator accounts, installation of malicious plugins, and arbitrary site content modification. Join the discussion | CVE Database V5 | 07/21/2026, 14:16:08 UTC Added: 07/21/2026, 14:42:54 UTC |
Showing 1 to 1 of 1 result