Threats tagged 'ghsa-m59v-2jwx-hmp2'

CVE-2026-96531 is a cross-site scripting (XSS) vulnerability in the Optimole WordPress plugin versions 4.0.0 through 4.2.12. It occurs because the plugin does not properly escape unrecognized attributes in its video-player block, allowing users with Author role or higher to inject event-handler attributes that execute scripts in the browsers of users who view the affected post.