CVE-2026-112867 WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...

CVE-2026-112867

The WordPress H5P plugin (versions up to and including 1.17.9 ) is vulnerable to a Stored Cross-Site Scripting (XSS) issue due to the Improper Neutralization of Input During Web Page Generation . An attacker can exploit this flaw to execute malicious scripts in the context of the victim's browser...