PT-2026-43504 · Nsthemes+1 · Ns Product Icon Badge

Abdulsamad Yusuf

·

CVE-2026-8707

·

Published

2026-05-26

·

Updated

2026-06-04

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions NS Product icon badge plugin for WordPress versions prior to 1.2.5
Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting (XSS) via PHP SELF. This occurs when a user is tricked into clicking a malicious link, enabling the execution of arbitrary web scripts in their browser.
Recommendations Update the plugin to a version newer than 1.2.4.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-8707

Affected Products

Ns Product Icon Badge