Vulnerabilities

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Authors…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Authors publishpress-authors allows Stored XSS.This issue affects PublishPress Authors: from n/a through 4.17.0.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

PublishPress

Product

PublishPress Authors

CVSS v3.1

6.5 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Weakness

CWE-79

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-115610 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 9
   CVE NVD 2d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCast streamcast allows Stored…

   CVSS 6.5 CVE-2026-116849 BPlugins
2. 9
   CVE NVD 2d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureDash suredash allows…

   CVSS 6.5 CVE-2026-110881 Brainstorm Force