CVE-2026-114427

The GutenKit WordPress plugin before version 2.5.5 is vulnerable to Stored XSS because it fails to properly sanitize custom CSS saved against a post. An attacker with Author role or higher can break out of the inline style block to inject and store JavaScript . This script executes in the browser...