CVE-2026-14203

The CVE concerns the WordPress plugin Smart Manager, prior to version 8.92.0. Affected component: rendering of a post title in the management grid; root cause is failure to properly encode a post field before inserting it into an HTML attribute. Impact: stored XSS that can be triggered by users w...