{"id":"CVE-2026-84096","revision":"e29297321f0b48eaaa45b98d0efe6da1","records":[{"revision":"e29297321f0b48eaaa45b98d0efe6da1","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-84096","aliases":[],"title":"WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields","description":"The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to overwrite a live form with field values that are output without escaping on public pages, leading to Stored Cross-Site Scripting.","state":0,"publishedAt":"2026-09-26T06:00:19.375+00:00","modifiedAt":"2026-09-26T22:41:14.959+00:00","affected":[{"ecosystem":"Vendor product","name":"wp-review-slider-pro","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"wp-review-slider-pro\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"12.7.12\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://wpscan.com/vulnerability/b30dd50c-6600-4ad6-8195-7b0606b29c9d/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-84096","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-84096","identifiers":["CVE-2026-84096"]},"retained":false,"historicalAffected":[]}],"coverage":[]}