CyberRota
← Ana sayfaya dön

CVE-2026-12696

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-08-01T07:16:28.797 · Çekilme zamanı: 2026-08-01T12:06:04.558511+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-12696
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress Java

Orijinal NVD Açıklaması

The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor who views the profile, including a logged-in administrator.