CVE-2026-15032

The wpDiscuz WordPress plugin (versions before 7.6.60 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The vulnerability is caused by the plugin's failure to properly escape a user-supplied URL before outputting it within an HTML attribute. This flaw allows an unauthenticate...