Reflected Cross-Site Scripting Vulnerability in Post Status Notifier Lite Plugin
CVE-2026-9577
Currently unrated
What is CVE-2026-9577?
The Post Status Notifier Lite WordPress plugin prior to version 1.13.0 is susceptible to a reflected Cross-Site Scripting (XSS) vulnerability. This occurs due to insufficient sanitization of the mod URL parameter when reflected on the admin settings page. An attacker can exploit this vulnerability by crafting a malicious URL, potentially affecting the administrator's session if followed. This highlights the importance of proper input validation and output escaping in web applications.
Affected Version(s)
Post Status Notifier Lite 0 < 1.13.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.