CVE-2026-5391

CVE-2026-5391 affects the WordPress LatePoint plugin (up to version 5.3.2). The issue is a Stored Cross-Site Scripting flaw in the btn_wrapper_classes attribute of the latepoint_resources shortcode, caused by insufficient input sanitization and output escaping in the locations branch of the short...

PT-2026-68471

Name of the Vulnerable Software and Affected Versions LatePoint versions prior to 5.3.3 Description Stored Cross-Site Scripting occurs when authenticated attackers with contributor level access or higher inject arbitrary web scripts into pages. This issue stems from insufficient input sanitizatio...