Threats tagged 'ghsa-q64f-8jfv-6r69'

CVE-2026-66690 is a high severity unauthenticated cross-site scripting (XSS) vulnerability affecting GiveWP versions up to and including 4.16.5. This vulnerability allows an attacker to inject malicious scripts during web page generation without requiring authentication. The vulnerability is categorized under CWE-79, indicating improper neutralization of input. No official patch or remediation guidance is currently provided by the vendor, and no known exploits are reported in the wild.