Aller au contenu
Se connecter
7.1 Élevée

CVE-2026-13726 The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the…

Description

The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request.

Produits et versions touchés

Produit Versions touchées Corrigé en
MPG 4.1 premières → < 4.1.8 4.1.8

Autres CVE de MPG

Les 3 CVE de MPG →
CVE-2026-104953 The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it… 6.8 Moyenne CVE-2026-103293 The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is… 6.8 Moyenne
Suivre cette CVE