Threats tagged 'ghsa-f3rw-vqjj-25wh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110813The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not properly sanitize a stored field definition High2026-11-06GCVE DatabaseCVE-2026-110813 The Advanced Custom Fields (ACF®) WordPress plugin versions before 6.8.11 contain a vulnerability where a stored field definition is not properly sanitized. This flaw allows unauthenticated users to inject malicious payloads via comment handling, which are then emitted as HTML attribute names and executed as JavaScript in the browsers of visitors or administrators viewing the affected field. Report on CVE-2026-110813 Vulnerability #ghsa-f3rw-vqjj-25wh	GCVE Database	2026-11-06

Page 1 of 1