Threats tagged 'ghsa-fj9f-47hw-34fv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-5505The WP-Clippy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's clippy shortcode in Medium6.42026-05-05GCVE DatabaseCVE-2026-5505 The WP-Clippy WordPress plugin up to version 1.0.0 is vulnerable to stored cross-site scripting (XSS) via its clippy shortcode. Authenticated users with contributor-level access or higher can inject malicious scripts due to insufficient input sanitization and output escaping. These scripts execute when any user views the affected page, potentially compromising user sessions or data. Report on CVE-2026-5505 Vulnerability CWE-79 #ghsa-fj9f-47hw-34fv	GCVE Database	2026-05-05

Page 1 of 1