2 matches found
CVE-2026-89002
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review t...
6.8CVSS0.00235EPSS
SaveExploits0References1
CVE-2026-89002: Improper Neutralization of Input During Web Page Generation
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review t...
6.8CVSS5.9AI score0.00235EPSS
SaveExploits0References2
20