CVE-2026-32419 — WordPress List category posts plugin <= 0.93.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-32419

WordPress List category posts plugin <= 0.93.1 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fernando Briano List category posts list-category-posts allows DOM-Based XSS.This issue affects List category posts: from n/a through <= 0.93.1.

Affected (CNA)

Vendor / product	Versions
Fernando Briano / List category posts	affected 0 through 0.93.1

CWE

CWE-79

References

https://patchstack.com/database/Wordpress/Plugin/list-category-posts/vulnerability/wordpress-list-category-posts-plugin-0-93-1-cross-site-scripting-xss-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.