Stored Cross-Site Scripting Vulnerability in Mang Board Plugin for WordPress
CVE-2026-88043

7.2HIGH

Key Information:

Vendor

WordPress
Status
Mang Board
Vendor
CVE Published:
15 October 2026

What is CVE-2026-88043?

The Mang Board WP plugin for WordPress contains a security flaw that enables unauthenticated attackers to execute arbitrary web scripts through the 'data_type' parameter. This vulnerability arises from inadequate input sanitization and output escaping, allowing malicious scripts to be injected into pages. Users accessing these compromised pages may unknowingly execute harmful scripts, leading to potential data breaches or unauthorized actions within their sessions.

Affected Version(s)

Mang Board 0 <= 2.4.0

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/changeset/3690677/mang...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

John Ryan Albon
.