CVE-2026-65511
HighCVSS 7.1Summary
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain an unauthenticated Cross-Site Scripting (XSS) vulnerability. An attacker can inject malicious JavaScript code.
Risk Assessment
The risk involves the possibility of executing a malicious script in the victim's browser, potentially leading to session theft, redirects, or data theft.
Recommendation
It is recommended to update the Manual theme to a version above 7.5.4 that includes a fix for the XSS vulnerability.
Other vulnerabilities in Manual - Documentation, Knowledge Base & Education WordPress Theme
See all- CVE-2026-65522Medium
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain a Cross Site Scripting (XSS) vulnerability exploitable by contributors. A contributor can inject malicious JavaScript code.
- CVE-2026-65500High
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain an unauthenticated Broken Access Control vulnerability. An attacker can gain unauthorized access to functions or data.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.