CVE-2026-11371

The BetterDocs WordPress plugin before version 4.5.5 is vulnerable to unauthenticated stored Cross-Site Scripting (XSS) . The issue stems from a lack of sanitization on AI-generated documentation summaries before they are stored and displayed. Because the summary generation feature is accessible ...