CVE-2026-22524

CVE-2026-22524 affects WordPress Legacy Admin plugin (legacy-admin) ≤ 9.5. It is a Reflected XSS caused by improper neutralization of input during web page generation. The CVSS vector indicates NETWORK access, low/low for impact, with user interaction required. The vulnerability could allow an at...