Medium · 6.5 CVE-2026-62084 EUVD-2026-89958GHSA-wqxf-vwhq-3jf6

WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: Jeff Starr Product: User Submitted Posts

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows Stored XSS.

This issue affects User Submitted Posts: from n/a through 20260810.

Affected products

Vendor	Product	Affected	Fixed
Jeff Starr	User Submitted Posts	≤ 20260810	—

References

https://patchstack.com/database/wordpress/plugin/user-submitted-posts/vulnerability/wordpress-user-submitted-posts-plugin-20260810-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry