UNKNOWN NVD

CVE-2026-14835

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfiltered_html capability, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any administrator who reviews the post and of any visitor once the post is published.

References

https://wpscan.com/vulnerability/f0b869b1-ef43-4540-9ca5-4440e763d307/

Published: 2026-08-30 · Source: NVD · Feed updated: 2026-08-30

This unknown severity vulnerability was published on 2026-08-30 via NVD.

vulnfeed aggregates 11450 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.