Cross-Site Scripting Vulnerability in Tangible Loops & Logic
CVE-2026-82123

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Loops & Logic
Vendor
CVE Published:
28 August 2026

What is CVE-2026-82123?

A cross-site scripting vulnerability exists in Tangible Loops & Logic due to improper neutralization of user input during web page generation. This flaw could allow an attacker to inject malicious scripts into the application, potentially compromising user data and session integrity. Safeguarding against such vulnerabilities is essential to secure web applications and protect user interactions.

Affected Version(s)

Loops & Logic 0

References

https://www.tenable.com/security/research/tra-2026-57

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.