Skip to content
OpenAdvisories

Vendor

kitae-park

22 known vulnerabilities.

Products

Mang Board WP 13 Mang Board 9
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-122665

    WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Stored XSS.This issue affects Mang Board WP: from n/a through 2.4.7.

    kitae-park Mang Board WP
  • Medium 6.4
    CVE-2026-110071

    Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute

    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacke…

    kitae-park Mang Board Web / CMS
  • Medium 6.4
    CVE-2026-109512

    Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter

    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    kitae-park Mang Board Web / CMS
  • Medium 6.4
    CVE-2026-104761

    Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter

    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    kitae-park Mang Board Web / CMS
  • Medium 6.1
    CVE-2026-13334

    Mang Board WP <= 2.3.4 - Reflected Cross-Site Scripting via 'stag' Parameter

    The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated …

    kitae-park Mang Board WP Web / CMS
  • Medium 6.1
    CVE-2025-12193

    Mang Board WP <= 2.3.1 - Reflected Cross-Site Scripting

    The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp' parameter in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at…

    kitae-park Mang Board WP Web / CMS
  • Medium 4.4
    CVE-2025-3435

    MangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer

    The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible…

    kitae-park Mang Board WP Web / CMS