CVE-2026-8702

The CVE-2026-8702 entry describes a Stored Cross-Site Scripting vulnerability in the WordPress plugin GBI To Print (versions

CVE-2026-8702

The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient output escaping in the gbitoprintshortcode function, which concatenates the raw shortcode attribute value directly...