Description
Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rustaurius | Ultimate FAQ | ≤ 2.4.14 | — |
Medium · 6.5
CVE-2026-94391
EUVD-2026-85477GHSA-c5hw-6h9w-47x8
WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack