CVE-2026-92424 Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-92424

The Content Egg WordPress plugin (versions prior to 11.9.0 ) is vulnerable to a stored Cross-Site Scripting (XSS) flaw. The issue arises because the bulk content-import feature fails to verify if a user is authorized to use a selected import preset; instead, it switches to the preset author's ide...

PT-2024-32824 · Mediawiki · Importdump

Name of the Vulnerable Software and Affected Versions: ImportDump extension for mediawiki affected versions not specified Description: The issue allows anyone who can edit the interface strings of a wiki, typically administrators and interface admins, to embed XSS payloads in the messages for...