CVE-2026-109998

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.4.3 . The flaw stems from insufficient input sanitization and output escaping of the content parameter during content_reply AJAX requests. Because the wp_ajax_nopriv_mb_tem...