Aller au contenu
Se connecter
7.1 Élevée

CVE-2026-25346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FAQ Builder AYS: from n/a through <= 1.8.2.

Produits et versions touchés

Produit Versions touchées Corrigé en
FAQ Builder AYS 1.8 premières → 1.8.2 Pas de correctif indiqué

Autres CVE de FAQ Builder AYS

Les 3 CVE de FAQ Builder AYS →
CVE-2025-24722 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ… 5.9 Moyenne CVE-2021-24461 The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the… Non notée
Suivre cette CVE