CVE-2026-42643

MEDIUM · CVSS 5.9 EPSS 0.03%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-29 · Last synced: 2026-05-29

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE

CVE-2026-42643

Severity

MEDIUM

CVSS

5.9

EPSS

0.03%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image Widget: from n/a through <= 4.4.11.