Veille CVE

Recherche « Unknown Child Pages Card »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Child Pages Card » ✕
  1. CVE-2026-18395 5.4 Moyenne

    Unknown Child Pages Card

    The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its shortcode attributes before outputting them back in a page, allowing users with the contributor role and above to perform Stored Cross-Site Scripting attacks.