Threats tagged 'ghsa-g8j7-hj5r-mx4w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123667The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.2 does not sanitise and escape keyword High2026-11-11GCVE DatabaseCVE-2026-123667 The Photo Engine WordPress plugin versions before 6.6.2 do not properly sanitize and escape keyword names before storing and displaying them on a debugging page. This flaw allows users with the Author role and above to perform stored cross-site scripting (XSS) attacks against administrators who view the debugging page. Report on CVE-2026-123667 Vulnerability #ghsa-g8j7-hj5r-mx4w	GCVE Database	2026-11-11

Page 1 of 1