CVE-2026-101935 : Detail

CVE-2026-101935

6.1
/
Sedang
2026-10-28
08h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-29
02h16 +00:00
CVE.org
NVD
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_kb_config' parameter (specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the