Lucene search
+L

3 matches found

NVD
NVD
•added 2026/08/05 8:16 a.m.•19 views

CVE-2026-6972

The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the chartsize attribute of the skillwrapper shortcode in all versions up to, and including, 2.6. This is due to insufficient input sanitization and output escaping on the chartsize attribute, which is...

6.4CVSS0.00349EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/08/05 6:38 a.m.•13 views

CVE-2026-6972

The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the chartsize attribute of the skillwrapper shortcode in all versions up to, and including, 2.6. This is due to insufficient input sanitization and output escaping on the chartsize attribute, which is...

6.4CVSS5.8AI score0.00349EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/05 6:38 a.m.•13 views

EUVD-2026-53186

The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the chartsize attribute of the skillwrapper shortcode in all versions up to, and including, 2.6. This is due to insufficient input sanitization and output escaping on the chartsize attribute, which is...

6.4CVSS6.1AI score0.00349EPSS
SaveExploits0References6
Rows per page
Query Builder