PT-2026-71540

CVE-2026-61974

·

Published

2026-08-13

·

Updated

2026-10-23

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Mang Board WP versions prior to 2.3.5
Description The Mang Board WP plugin for WordPress contains a stored Cross-Site Scripting (XSS) flaw. This issue occurs because of insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts into pages. These scripts execute automatically when a user visits the affected page.
Recommendations Update Mang Board WP to version 2.3.5 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2026-61974
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com