Lucene search
+L

2 matches found

NVD
NVD
added yesterday8 views

CVE-2026-13726

The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request...

7.1CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-13726

The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder