CVE-2026-27440

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.7.6...

CVE-2026-27440

The CVE-2026-27440 entry concerns a Stored XSS in the WordPress plugin myCred (versions up to 2.9.7.6). According to cited sources (NVD/Red Hat/CVE list and Patchstack), the vulnerability arises from improper neutralization of input during web page generation, enabling Cross-Site Scripting. The b...

WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Psai in WordPress Plugin myCred versions = 2.9.7.6...