CVE-2026-13334

Name of the Vulnerable Software and Affected Versions Mang Board WP versions prior to 2.3.5

Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user into clicking a link containing a malicious script via the stag parameter, which then executes in the user's browser.

Recommendations Update Mang Board WP to version 2.3.5 or later. As a temporary workaround, restrict or sanitize the use of the stag parameter.