Threats tagged 'ghsa-hp42-vhhj-w836'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110525The MCB WordPress plugin through 1.0.0 does not sanitise or escape request header values before storing them and later High2026-11-06GCVE DatabaseCVE-2026-110525 The MCB WordPress plugin up to version 1.0.0 fails to sanitize or escape request header values before storing and displaying them in the administrator statistics grid. This vulnerability allows unauthenticated attackers to inject malicious JavaScript, which executes in the browser of an administrator viewing the statistics page. Report on CVE-2026-110525 Vulnerability #ghsa-hp42-vhhj-w836	GCVE Database	2026-11-06

Page 1 of 1