Stored Cross-Site Scripting Vulnerability in Mang Board Plugin for WordPress

CVE-2026-104761

What is CVE-2026-104761?

The Mang Board plugin for WordPress contains a vulnerability that allows authenticated attackers with custom-level access or higher to exploit insufficient input sanitization and output escaping in the 'content' parameter. This flaw enables the injection of arbitrary web scripts into pages, which can be executed whenever a user accesses the compromised page. This can lead to unauthorized actions and data exposure, posing a significant threat to the security of WordPress sites utilizing this plugin.

References