CVE-2026-27365

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS.

This issue affects PublishPress Series: from n/a through 2.17.0.

Affected Software

VendorProductVersion RangeStatus
PublishPressPublishPress Seriesn/a <= 2.17.0affected

Weaknesses

  • CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References