Lucene search
+L

204 matches found

NVD
NVD
•added 2026/10/30 7:18 p.m.•9 views

CVE-2026-116847

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...

7.1CVSS0.0019EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/30 6:30 p.m.•26 views

CVE-2026-116847 WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...

7.1CVSS0.0019EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/30 6:30 p.m.•7 views

EUVD-2026-114307

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...

7.1CVSS5.7AI score0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/30 6:30 p.m.•10 views

CVE-2026-116847 WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...

7.1CVSS5.7AI score0.0019EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/30 6:30 p.m.•22 views

CVE-2026-116847

The Mang Board WP plugin for WordPress versions

7.1CVSS5.7AI score0.0019EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/30 8:28 a.m.•4 views

WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin Mang Board WP versions = 2.4.6...

7.1CVSS5.7AI score0.0019EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/30 12:00 a.m.•8 views

PT-2026-133757

Name of the Vulnerable Software and Affected Versions Mang Board WP versions 2.4.6 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendatio...

7.1CVSS6AI score0.0019EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/30 12:00 a.m.•6 views

CVE-2026-116847: Kitae Park Mang Board WP: Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...

7.1CVSS5.7AI score0.0019EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/28 7:16 a.m.•11 views

CVE-2026-110071

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...

6.4CVSS0.00201EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/28 6:45 a.m.•10 views

EUVD-2026-111600

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...

6.4CVSS6.1AI score0.00201EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/28 6:45 a.m.•29 views

CVE-2026-110071 Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...

6.4CVSS0.00201EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/28 6:45 a.m.•9 views

CVE-2026-110071 Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...

6.4CVSS6.1AI score0.00201EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/28 6:45 a.m.•15 views

CVE-2026-110071

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.4.5 . The root cause is insufficient input sanitization and output escaping specifically related to the 'align' shortcode attribute. An authenticated attacker with contributor-...

6.4CVSS6.1AI score0.00201EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/28 12:00 a.m.•12 views

PT-2026-127872

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...

6.4CVSS6.1AI score0.00201EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/28 12:00 a.m.•8 views

CVE-2026-110071: kitae-park Mang Board: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all…

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...

6.4CVSS6.1AI score0.00201EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/10/28 12:00 a.m.•8 views

WordPress Mang Board cross-site scripting vulnerability

WordPress Mang Board versions 2.4.5 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping for the align parameter, potentially enabling stored cross-site scripting attacks. Authenticated attackers with contributor or...

6.4CVSS5.6AI score0.00201EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2026/10/27 5:40 p.m.•9 views

WordPress Mang Board plugin <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Mang Board WP versions = 2.4.5...

6.4CVSS5.8AI score0.00201EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/10/21 3:17 p.m.•12 views

CVE-2026-111834

Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4...

9.9CVSS0.00372EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/21 2:00 p.m.•15 views

CVE-2026-111834 WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4...

9.9CVSS5.9AI score0.00372EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/21 2:00 p.m.•12 views

EUVD-2026-107281

Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4...

9.9CVSS5.9AI score0.00372EPSS
SaveExploits0References1
Rows per page
Query Builder