CyberRota
← Ana sayfaya dön

CVE-2026-14190

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-27T07:16:25.510 · Çekilme zamanı: 2026-07-27T12:09:40.232838+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-14190
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress Java

Orijinal NVD Açıklaması

The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.