CVE-2026-15032

The CVE-2026-15032 entry concerns the WordPress plugin Comments (wpDiscuz) prior to version 7.6.60 . Affected component: URL handling inHTML output; root cause is improper escaping of a user-supplied URL inside an HTML attribute, enabling an unauthenticated attacker to store a Cross-Site Scriptin...