CVE-2026-9577

Name of the Vulnerable Software and Affected Versions Post Status Notifier Lite versions prior to 1.13.0

Description Insufficient escaping of the mod URL parameter in the admin settings page endpoint 'admin.php?page=post-status-notifier-lite' allows for Reflected Cross-Site Scripting. This occurs when an administrator is tricked into following a specially crafted URL, causing the script to execute within their session.

Recommendations Update Post Status Notifier Lite to version 1.13.0 or later. Avoid using the mod parameter in the 'admin.php?page=post-status-notifier-lite' endpoint until the update is applied.