← Back to Dashboard

CVE-2026-83546

MEDIUM NVD
CVSS Score
6.8
Severity
MEDIUM
Source
NVD
Published
Sep 11, 2026
Description

The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.

View Full Details ← Back