7.1
Élevée
CVE-2026-91829 The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into…
Description
The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into a link target, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting via a crafted URL against anyone who clicks it, including administrators.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Subscribe to Comments 2.3 | premières → < 2.3.3 | 2.3.3 |