Threats Tagged 'ghsa-p7mg-pc34-v9p7'

1 threat

Threats Tagged 'ghsa-p7mg-pc34-v9p7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.2%	CVE-2026-94263Advanced Custom Fields: Extended · Improper Neutralization of Special Elements in Output Used by a Downstream Component… Medium4.8EPSS 0.2%2026-10-23CVE Database V5CVE-2026-94263 The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end forms, allowing unauthenticated visitors to have arbitrary shortcodes executed server-side when they submit a form whose stored configuration does not carry the relevant setting. EPSS 0.2%Vulnerability #cwe-74 #ghsa-p7mg-pc34-v9p7	CVE Database V5	2026-10-23

Showing 1–1 of 1 result