CyberRota
← Ana sayfaya dön

CVE-2026-9677

MEDIUM · CVSS 4.8 EPSS %0.14

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-27T06:16:34.783 · Çekilme zamanı: 2026-06-30T18:36:27.954358+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-9677
Severity
MEDIUM
CVSS
4.8
EPSS
%0.14
WordPress

Orijinal NVD Açıklaması

The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariff_infourl setting before outputting it in the frontend HTML via the generateshariff() function, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).