CVE-2026-87971: CVE-2026-87971: siteler arası betik çalıştırma (XSS)

Açıklama (NVD)

The If-So Dynamic Content WordPress plugin before 1.10.2 does not validate the URL scheme of a request-supplied value before reflecting it into a link on an admin page, allowing attackers to execute arbitrary JavaScript in the browser of a logged-in user who opens a crafted link.

Özet bilgiler

CVSS v3.1

7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS

%0,14 (yüzdelik 4)

CWE

CWE-79

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wpscan.com
• CWE-79