CVE-2026-105316
HIGH NVDCVSS Score
7.1
Severity
HIGH
Source
NVD
Published
Oct 07, 2026
Description
The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting.