{"id":"CVE-2026-121862","published":"2026-11-11T06:17:16.710","lastModified":"2026-11-11T06:17:16.710","description":"The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, and publishes them without moderation, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against any visitor of the affected posts, including administrators.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/2656cb05-7d95-4e82-acb4-ee62a31715f8/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}