CVE-2026-85653

Name of the Vulnerable Software and Affected Versions Contextual Related Posts versions prior to 4.4.2

Description Insufficient input sanitization and output escaping allow authenticated attackers with author-level access and above to perform Stored Cross-Site Scripting. This is achieved by injecting arbitrary web scripts through the other attributes block parameter, which then execute when a user visits the affected page.

Recommendations Update Contextual Related Posts to version 4.4.2 or later. As a temporary mitigation, restrict author-level access to the other attributes block parameter.