CVE-2026-94391

WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.

Vendor / product	Versions
Rustaurius / Ultimate FAQ	affected n/a through 2.4.14

CWE-79

CISA-ADP

No English description supplied.

No references supplied.