Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/07/16 6:0 a.m.40 views

CVE-2026-11371 BetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt Injection

The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summary before storing and outputting it, and the feature that generates it is exposed to unauthenticated users, allowing them to store a malicious payload via prompt injection that executes in the browse...

0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder