WordPress itsukaita plugin <= 0.1.2 - Reflected Cross-Site Scripting via 'day_from' Parameter vulnerability

Reflected Cross-Site Scripting via 'dayfrom' Parameter vulnerability discovered by san6051 - PWC in WordPress Plugin itsukaita versions = 0.1.2...

EUVD-2026-14176

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2427

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2427 itsukaita <= 0.1.2 - Reflected Cross-Site Scripting via 'day_from' Parameter

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2427 itsukaita <= 0.1.2 - Reflected Cross-Site Scripting via 'day_from' Parameter

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2427

The CVE-2026-2427 issue concerns the itsukaita WordPress plugin. Affected: itsukaita plugin for WordPress. Vulnerability: Reflected Cross-Site Scripting via the day_from and day_to parameters in all versions up to and including 0.1.2, caused by insufficient input sanitization and output escaping....

CVE-2026-2427

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

PT-2026-26836

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'day from' and 'day to' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

WordPress plugin itsukaita 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...