CVE-2026-65522
MediumCVSS 6.5Summary
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain a Cross Site Scripting (XSS) vulnerability exploitable by contributors. A contributor can inject malicious JavaScript code.
Risk Assessment
The risk includes session theft, redirection to malicious sites, or theft of data from visitors of the affected page.
Recommendation
Update the Manual theme to the latest version and restrict contributor permissions.
Other vulnerabilities in Manual - Documentation, Knowledge Base & Education WordPress Theme
See all- CVE-2026-65511High
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain an unauthenticated Cross-Site Scripting (XSS) vulnerability. An attacker can inject malicious JavaScript code.
- CVE-2026-65500High
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain an unauthenticated Broken Access Control vulnerability. An attacker can gain unauthorized access to functions or data.
Original NVD description (English source)
Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.