CVE-2026-101935:详情

CVE-2026-101935

6.1
/
中危
2026-10-28
08h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-29
02h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_kb_config' parameter (specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the