Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/27 5:31 a.m.42 views

CVE-2026-8702 GBI To Print <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'div' Shortcode Attribute

The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient output escaping in the gbitoprintshortcode function, which concatenates the raw shortcode attribute value directly...

6.4CVSS0.00156EPSS
SaveExploits0References2
Rows per page
Query Builder