Stored XSS Vulnerability in VOD Infomaniak by Infomaniak Network
CVE-2026-114695

7.1HIGH

Key Information:

Vendor

WordPress
Status
Vod Infomaniak
Vendor
CVE Published:
24 October 2026

What is CVE-2026-114695?

The Stored XSS vulnerability in VOD Infomaniak arises from improper input sanitization during web page generation. This issue allows attackers to inject malicious scripts, which are then stored on the server and executed in the browsers of users accessing the compromised web pages. This can lead to unauthorized access to sensitive information and manipulation of user sessions. It's crucial for users of VOD Infomaniak versions 1.5.14 and below to implement security measures and updates to mitigate the risks.

Affected Version(s)

VOD Infomaniak 0 <= 1.5.14

References

https://patchstack.com/database/wordpress/plugin/vod-info...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Tang | Patchstack Bug Bounty Program
.