Threats tagged 'ghsa-r934-4fcw-2664'

CVE-2026-125815 is a cross-site scripting (XSS) vulnerability in the 'We’re Open!' opening-hours plugin by Noah Hearle. It involves improper neutralization of script-related HTML tags, allowing code injection. The vulnerability affects versions up to 2.8. The CVSS score is 5.3, indicating medium severity. No public exploits or patches are currently documented.