CVE-2026-121782: WordPress If-So Dynamic Content Personalization plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability

Q: Which installations are affected?

The issue affects If-So Dynamic Content Personalization versions through 1.10.3. The available information does not identify a fixed version.

Q: What does an attacker need to exploit this issue?

The vector is network-accessible, requires no privileges, and has low attack complexity. Exploitation requires user interaction, consistent with a reflected XSS attack.

Q: What is the potential impact of successful exploitation?

Successful exploitation can affect confidentiality, integrity, and availability at a low level, and the impact can extend beyond the vulnerable component because the scope is changed.

Published Nov 9, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.10.3.

Affected Software

1 affected component

If-So If-So Dynamic Content Personalization<=1.10.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade If-So Dynamic Content Personalization to a version that resolves this vulnerability.
Fixed in 1.10.4

Event History

Nov 9, 2026

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects If-So Dynamic Content Personalization versions through 1.10.3. The available information does not identify a fixed version.

What does an attacker need to exploit this issue?

The vector is network-accessible, requires no privileges, and has low attack complexity. Exploitation requires user interaction, consistent with a reflected XSS attack.

What is the potential impact of successful exploitation?

Successful exploitation can affect confidentiality, integrity, and availability at a low level, and the impact can extend beyond the vulnerable component because the scope is changed.

CVE-2026-121782: WordPress If-So Dynamic Content Personalization plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?