7.1
Élevée
CVE-2026-94641 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UsersWP 1.2 | premières → 1.2.73 | Pas de correctif indiqué |
Autres CVE de UsersWP
Les 6 CVE de UsersWP →
CVE-2026-103086
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control…
6.5
Moyenne
CVE-2026-25015
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This…
4.3
Moyenne
CVE-2025-67593
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This…
4.3
Moyenne
CVE-2025-66072
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control…
5.3
Moyenne