Beveiligingsadvies

CVE-2026-14307

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-30 06:00:18

Laatst bijgewerkt 2026-08-31 12:38:06

Toegewezen door WPScan

CVSS-score 7.1

Status PUBLISHED

Beschrijving

The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them back in AJAX responses that are served with an HTML content type, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a victim is tricked into submitting a crafted request.

← Alle CVE's bekijken Bekijk op cve.org ↗