Untapwp vulnerabilities and threats

CVE-2026-120364 is a stored cross-site scripting (XSS) vulnerability in Untapwp Vidplex versions prior to 1.0.4. The flaw involves improper neutralization of input during web page generation, allowing attackers with limited privileges to inject malicious scripts that can affect confidentiality, integrity, and availability. The issue is fixed in version 1.0.4.