Medium · 6.5 CVE-2026-111844 EUVD-2026-104878GHSA-jgjr-3xjq-2qfh

WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability

Published Oct 20, 2026 · Updated Oct 20, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23.

Affected products

Vendor	Product	Affected	Fixed
Brizy	Brizy	2.8.23	—

References

https://patchstack.com/database/wordpress/plugin/brizy/vulnerability/wordpress-brizy-plugin-2-8-23-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry