CVE-2026-42643

The CVE concerns the StellarWP WordPress Image Widget (image-widget) plugin, affected up to version 4.4.11. Root cause: improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting (XSS) vulnerability. Impact, per the provided data, is an XSS condition wit...