SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-57420

MEDIUM · CVSS 6.5 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The Author Box WP Lens plugin for Divi is vulnerable to a stored cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability could allow attackers to inject malicious scripts that execute in the context of users' browsers, potentially leading to data theft or session hijacking. Website administrators using versions up to 2.1.5 should prioritize patching this vulnerability to safeguard against potential exploitation.

CVE
CVE-2026-57420
Severity
MEDIUM
CVSS
6.5
EPSS
0.16%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netrr Author Box WP Lens author-box-for-divi allows Stored XSS.This issue affects Author Box WP Lens: from n/a through <= 2.1.5.