Reflected XSS Vulnerability in Kitae Park Mang Board Plugin for WordPress
CVE-2026-122666

7.1HIGH

Key Information:

Vendor

WordPress
Status
Mang Board WP
Vendor
CVE Published:
9 November 2026

What is CVE-2026-122666?

A reflected cross-site scripting (XSS) vulnerability exists in the Kitae Park Mang Board WP plugin, allowing attackers to inject malicious scripts into web pages viewed by users. This can lead to unauthorized actions or data exposure when the affected webpage is loaded, potentially compromising user interaction and security. The vulnerability impacts versions from n/a up to 2.4.7, highlighting the need for users to update and secure their installations to safeguard against potential exploitation.

Affected Version(s)

Mang Board WP 0 <= 2.4.7

References

https://patchstack.com/database/wordpress/plugin/mangboar...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dexx-tech | Patchstack Bug Bounty Program
.