Threats tagged 'ghsa-wm25-rgf8-wg5c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-124995Michal Jaworski · Cross-site Scripting High7.12026-11-15GCVE DatabaseCVE-2026-124995 A stored cross-site scripting (XSS) vulnerability exists in the WordPress plugin 'Track, Analyze & Optimize by WP Tao' up to version 1.3.1. This vulnerability allows attackers to inject malicious scripts that are stored and later executed in users' browsers when they view affected pages. Report on CVE-2026-124995 Vulnerability CWE-79 #ghsa-wm25-rgf8-wg5c	GCVE Database	2026-11-15

Page 1 of 1