Skip to content
Sign in
7.1 High

CVE-2026-94641 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.

Affected products and versions

Product Affected versions Fixed in
UsersWP 1.2 earliest → 1.2.73 No fix stated

Other CVEs of UsersWP

The 6 CVEs of UsersWP →
CVE-2026-103086 Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control… 6.5 Medium CVE-2026-25015 Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This… 4.3 Medium CVE-2025-67593 Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This… 4.3 Medium CVE-2025-66072 Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control… 5.3 Medium
Track this CVE