CVE-2026-61974

HighCVSS 7.1

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

The Mang Board WP plugin versions up to 2.3.4 contain a Cross-Site Scripting (XSS) vulnerability that can be exploited without authentication.

An attacker can inject malicious scripts into pages viewed by other users, potentially leading to session theft or account takeover.

Update the Mang Board WP plugin to the latest version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.