Threats tagged 'ghsa-vgj5-89vw-rww2'

CVE-2026-13701 is a stored Cross-Site Scripting (XSS) vulnerability in the Advanced Excerpt WordPress plugin before version 4.5. The plugin fails to properly sanitize and escape one of its settings before rendering it on the front end, allowing administrators, including those without unfiltered_html capability, to inject malicious scripts. This vulnerability can lead to script execution in the context of any visitor viewing affected pages.