{"id":"CVE-2026-121863","published":"2026-11-11T06:17:16.877","lastModified":"2026-11-11T06:17:16.877","description":"The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users, and serves that response as HTML, leading to a Reflected Cross-Site Scripting.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/80b4b9d0-e48b-4f24-b4bd-71dc37ac1602/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}