Threats tagged 'ghsa-2j9x-ww5c-7853'

CVE-2026-66706 is a medium severity cross-site scripting (XSS) vulnerability in the Subscribe to Comments plugin by Mark Jaquith. It affects versions up to and including 2.3.1. The vulnerability involves improper neutralization of input during web page generation, which can lead to reflected or stored XSS attacks. The CVSS score is 5.9, indicating a moderate impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.