1 matches found
CVE-2026-17532: Improper Neutralization of Input During Web Page Generation
The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraphaccelprep' parameter in versions up to, and including, 2.29.15. This is due to the CacheExtractPreparePageParams function using PHP's loose inequality operator != to compare the expecte...
6.1CVSS6AI score0.00794EPSS
SaveExploits1References2
20