7.1
Élevée
CVE-2026-42678 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through 4.14.5.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GiveWP 4.14 | premières → 4.14.5 | Pas de correctif indiqué |
Autres CVE de GiveWP
Les 9 CVE de GiveWP →
CVE-2026-96333
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This…
7.5
Élevée
CVE-2026-106600
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured…
5.3
Moyenne
CVE-2026-104404
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…
6.5
Moyenne
CVE-2026-97196
Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows…
9.1
Critique