Threats Tagged 'ghsa-q29h-rjf7-v37r'

1 threat

Threats Tagged 'ghsa-q29h-rjf7-v37r'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.2%	CVE-2026-85418The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a… (CVE-2026-85418) HighEPSS 0.2%2026-09-09GCVE DatabaseCVE-2026-85418 The Orbit Fox WordPress plugin before version 3.0.9 contains a vulnerability where it does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets. This flaw allows users with contributor-level access or higher to inject arbitrary web scripts that execute when any visitor views the affected page. This cross-site scripting (XSS) vulnerability could lead to unauthorized script execution in the context of the affected website. EPSS 0.2%Vulnerability #ghsa-q29h-rjf7-v37r #cwe-79	GCVE Database	2026-09-09

Showing 1–1 of 1 result