CVE-2026-121863

The Knowledge Building WordPress plugin (versions prior to 0.7.3 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The flaw occurs because the plugin fails to escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users ...