CVE-2026-9833

7.1 Élevée

Publiée le 20/07/2026 à 09:16 · Modifiée le 20/07/2026 à 22:39 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of a logged-in user with `edit_pages` capability (Editor or higher) who is tricked into following a crafted link.

Traduire en français

Produits concernés

Unknown Tag Groups is the Advanced Way to Display Your Taxonomy Terms

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.1 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-79

Références

https://wpscan.com/vulnerability/75792c33-2d9d-46db-a98c-00ec40951099/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories