5.9
Moyenne
CVE-2026-42643 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image Widget: from n/a through <= 4.4.11.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Image Widget 4.4 | premières → 4.4.11 | Pas de correctif indiqué |