Stored Cross-Site Scripting in Mang Board Plugin for WordPress

CVE-2026-96871

What is CVE-2026-96871?

The Mang Board plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping concerning the 'data_type' parameter. This vulnerability allows unauthenticated attackers to inject malicious web scripts that execute when users visit affected pages. The vulnerability is particularly critical on boards configured with default settings, enabling guest posting. All versions up to and including 2.4.2 are affected, making it imperative for users to implement corrective measures to secure their sites.

References