Threats tagged 'ghsa-5542-wp67-24rf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-121863The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them High2026-11-11GCVE DatabaseCVE-2026-121863 The Knowledge Building WordPress plugin versions before 0.7.3 contain a reflected cross-site scripting (XSS) vulnerability. This occurs because several user-supplied values are not properly escaped before being echoed back in the response of an AJAX action accessible to unauthenticated users. The response is served as HTML, enabling potential injection of malicious scripts. Report on CVE-2026-121863 Vulnerability #ghsa-5542-wp67-24rf	GCVE Database	2026-11-11

Page 1 of 1