CVE-2026-122665: WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

Q: Who can exploit this vulnerability?

An attacker needs at least low-level privileges in the WordPress environment and must convince a user to interact with the injected content. The CVSS vector indicates network reachability, low attack complexity, low privileges required, and user interaction required.

Q: What versions are affected?

Mang Board WP versions through 2.4.7 are affected. The available data does not identify a fixed version.

Q: What is the potential impact?

Successful exploitation can result in stored cross-site scripting, causing attacker-supplied script to run in another user's browser when they view affected content. The reported impact includes low confidentiality, integrity, and availability effects, with scope changed.

Published Nov 9, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Stored XSS.This issue affects Mang Board WP: from n/a through 2.4.7.

Affected Software

1 affected component

Kitae Park Mang Board WP<=2.4.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Mang Board WP plugin to a version that resolves this vulnerability.
Fixed in 2.4.8

Event History

Nov 9, 2026

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker needs at least low-level privileges in the WordPress environment and must convince a user to interact with the injected content. The CVSS vector indicates network reachability, low attack complexity, low privileges required, and user interaction required.

What versions are affected?

Mang Board WP versions through 2.4.7 are affected. The available data does not identify a fixed version.

What is the potential impact?

Successful exploitation can result in stored cross-site scripting, causing attacker-supplied script to run in another user's browser when they view affected content. The reported impact includes low confidentiality, integrity, and availability effects, with scope changed.

CVE-2026-122665: WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What versions are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What versions are affected?

What is the potential impact?