CVE-2026-92409

MEDIUMCVSS 6.8

Description

The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page is viewed.

Timeline

Published:October 14th, 2026 7:17 AM

Last modified:October 15th, 2026 11:18 AM

CVSS Scoring

CVSS v3: 6.8 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-79

References & Reports

Advisories, patches, and third-party reports

https://wpscan.com/vulnerability/1c74b76e-fd6f-4dbc-aba1-f7de2444ee95/

Source: NIST NVD · Data may lag official sources by up to one minute