Aller au contenu
Se connecter
8.8 Élevée

CVE-2026-84829 The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build…

Description

The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to inject arbitrary attributes into pages served to every visitor, which leads to Stored Cross-Site Scripting.

Produits et versions touchés

Produit Versions touchées Corrigé en
Optimole 4.2 4.2.3 → < 4.2.12 4.2.12

Autres CVE de Optimole

Les 3 CVE de Optimole →
CVE-2026-96530 The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored… 6.5 Moyenne CVE-2026-96531 The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video-player block before… 6.8 Moyenne
Suivre cette CVE