Threats Tagged 'ghsa-rpr7-hhq5-32r7'

1 threat

Threats Tagged 'ghsa-rpr7-hhq5-32r7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.2%	CVE-2026-101890Prime Mover · Cross-site Scripting Medium5.1EPSS 0.2%2026-10-01CVE Database V5CVE-2026-101890 CVE-2026-101890 is a stored cross-site scripting (XSS) vulnerability in the Prime Mover WordPress plugin before version 2.2.1. It allows attackers to inject arbitrary JavaScript code via an unescaped site_title value in a package's footprint.json file. The malicious script executes in an administrator's browser when viewing the Prime Mover Packages list, without requiring package restoration. EPSS 0.2%Vulnerability Codexonics #ghsa-rpr7-hhq5-32r7	CVE Database V5	2026-10-01

Showing 1–1 of 1 result