CVE-2026-6972
6.4
/ 中危
2026-08-05
08h16 +00:00
08h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `chart_size` attribute of the `skillwrapper` shortcode in all versions up to, and including, 2.6. This is due to insufficient input sanitization and output escaping on the `chart_size` attribute, which is concatenated directly into an inline `