9 matches found
CVE-2026-88788
The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify that a user may edit the target post, allowing users with contributor-level access or above to store JavaScript that...
EUVD-2026-84275
The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify that a user may edit the target post, allowing users with contributor-level access or above to store JavaScript that...
CVE-2026-88788 Text Styler <= 1.1.1 - Contributor+ Stored XSS
The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify that a user may edit the target post, allowing users with contributor-level access or above to store JavaScript that...
CVE-2026-88788 Text Styler <= 1.1.1 - Contributor+ Stored XSS
The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify that a user may edit the target post, allowing users with contributor-level access or above to store JavaScript that...
CVE-2026-88788
The Text Styler WordPress plugin (versions through 1.1.1 ) contains a Stored XSS vulnerability. The root cause is a failure to sanitize and escape user-supplied styling values before they are outputted within a front-end style block, combined with a lack of verification regarding a user's permiss...
WordPress Text Styler plugin <= 1.1.1 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin Text Styler versions = 1.1.1...
CVE-2026-88788: Improper Neutralization of Input During Web Page Generation
The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify that a user may edit the target post, allowing users with contributor-level access or above to store JavaScript that...
PT-2026-96649
Name of the Vulnerable Software and Affected Versions Text Styler versions prior to 1.1.2 Description The Text Styler WordPress plugin fails to sanitize and escape user-supplied styling values before they are output within a front-end style block. Additionally, the plugin does not verify if a use...
Cross-site scripting vulnerability in wordpress plugin text-styler
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin text-styler has a cross-site scripting vulnerability due to improper filtering of user input, which allo...