Threats tagged 'ghsa-jv46-h5f9-888h'

CVE-2026-66440 is a high severity unauthenticated Cross-Site Scripting (XSS) vulnerability in XplodedThemes WPIDE – File Manager & Code Editor versions up to and including 3.5.7. The vulnerability allows an attacker to inject malicious scripts during web page generation due to improper input neutralization. This can lead to partial compromise of confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. No known exploits are reported in the wild.