Cross Site Scripting Vulnerability in BSK PDF Manager Software
CVE-2026-65528

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Bsk PDF Manager
Vendor
CVE Published:
23 July 2026

What is CVE-2026-65528?

The BSK PDF Manager plugin for WordPress versions up to 3.8 is vulnerable to a Cross Site Scripting (XSS) flaw. This vulnerability can be exploited by attackers to inject malicious scripts into webpages viewed by users. By taking advantage of this issue, an attacker could potentially execute arbitrary code in the context of the user's browser, leading to unauthorized access to sensitive data or manipulation of site content. Proper sanitization and validation of user inputs are critical to mitigate this risk.

Affected Version(s)

BSK PDF Manager <= 3.8

References

https://patchstack.com/database/wordpress/plugin/bsk-pdf-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

luc | Patchstack Bug Bounty Program
.