CVE-2026-13609

CVE-2026-13609 affects the Frontend Admin by DynamiApps WordPress plugin (pre-3.29.9). The bug occurs when HTML entities are decoded in a submitted form field after sanitization, re‑enabling HTML tags that were neutralized. A double‑encoded payload submitted by an unauthenticated visitor is store...