Skip to content
OpenAdvisories

Vendor

mallsop

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-0594 Public exploit Scanner template

    List Site Contributors <= 1.1.8 - Reflected Cross-Site Scripting via alpha

    The List Site Contributors plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'alpha' parameter in versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenti…