6.5
Moyenne
CVE-2026-104404 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GiveWP 4.17 | premières → 4.17.0 | Pas de correctif indiqué |
Autres CVE de GiveWP
Les 9 CVE de GiveWP →
CVE-2026-96333
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This…
7.5
Élevée
CVE-2026-106600
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured…
5.3
Moyenne
CVE-2026-97196
Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows…
9.1
Critique
CVE-2026-82222
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection
10.0
Critique