Threats tagged 'ghsa-6gq8-gfgv-846h'

CVE-2026-17010 is a stored Cross-Site Scripting (XSS) vulnerability in the Saitama Addon Pack WordPress plugin up to version 1.0.8. It arises because certain post metadata values are not properly sanitized and escaped before being output. This allows users with contributor-level access or higher to inject malicious scripts that execute in the browsers of higher-privileged users who view the affected content. The vulnerability has a medium severity rating with a CVSS score of 5.4.