Threats tagged 'ghsa-8x4j-963r-3gx3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-113488The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a High2026-10-28GCVE DatabaseCVE-2026-113488 The GeoDirectory WordPress plugin versions before 2.8.196 contain a vulnerability where a post badge shortcode attribute is not properly escaped in a JavaScript context. This flaw allows users with Contributor role or higher to execute Stored Cross-Site Scripting (XSS) attacks against anyone who clicks the badge, including administrators. Report on CVE-2026-113488 Vulnerability #ghsa-8x4j-963r-3gx3	GCVE Database	2026-10-28

Page 1 of 1