WordPress Advanced Excerpt plugin < 4.5 - Admin+ Stored XSS via Ellipsis Setting vulnerability

Admin+ Stored XSS via Ellipsis Setting vulnerability discovered by Mustafa Ahmed in WordPress Plugin Advanced Excerpt versions 4.5...

CVE-2026-13701

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

EUVD-2026-55021

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

CVE-2026-13701 Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis Setting

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

CVE-2026-13701

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

CVE-2026-13701 Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis Setting

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

CVE-2026-13701

The Advanced Excerpt WordPress plugin (versions before 4.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to properly sanitize and escape one of its settings before outputting it on the website's front end. Specifically, the vulnerability is linked to the Ellipsis Setting ....

CVE-2026-13701: Improper Neutralization of Input During Web Page Generation

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

PT-2026-69339

Name of the Vulnerable Software and Affected Versions Advanced Excerpt WordPress plugin versions prior to 4.5 Description Stored Cross-Site Scripting XSS occurs because the plugin fails to sanitize and escape a settings value before it is rendered on the site front end. This allows administrators...