CVE-2026-122666

Name of the Vulnerable Software and Affected Versions Mang Board WP versions prior to 2.4.8

Description The Mang Board plugin for WordPress contains a Reflected Cross-Site Scripting (XSS) flaw. This occurs due to insufficient input sanitization and output escaping during web page generation. An unauthenticated attacker can exploit this by injecting arbitrary web scripts into pages, which execute when a user is tricked into performing a specific action, such as clicking a malicious link.

Recommendations Update Mang Board WP to version 2.4.8 or later.