{"id":"CVE-2026-113409","revision":"1c8e1210af644567ac4f621b9cb36d8a","records":[{"revision":"1c8e1210af644567ac4f621b9cb36d8a","observedAt":"2026-10-29T03:48:01.066+00:00","statement":{"source":"cve-program","id":"CVE-2026-113409","aliases":[],"title":"The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting. A threat actor able to modify the plugin's configuration could execute arbitrary JavaScript in a…","description":"The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting. A threat actor able to modify the plugin's configuration could execute arbitrary JavaScript in an administrator's session when they visited the impacted page.","state":0,"publishedAt":"2026-10-29T01:43:11.787+00:00","modifiedAt":"2026-10-29T02:02:12.553+00:00","affected":[{"ecosystem":"Vendor product","name":"ortto","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"canva\",\n                    \"product\": \"ortto\",\n                    \"platforms\": [\n                        \"WordPress\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.0.25\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","score":4.8,"severity":"MEDIUM"}],"references":["https://trust.canva.com/?tcuUid=acddc58b-886d-487c-b2d4-837fde87ddc8"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113409","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-113409","identifiers":["CVE-2026-113409"]},"retained":false,"historicalAffected":[]}],"coverage":[]}