{"id":"CVE-2026-91829","revision":"dbd9d1131dc74be9b546003c549c7ffe","records":[{"revision":"dbd9d1131dc74be9b546003c549c7ffe","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-91829","aliases":[],"title":"Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter","description":"The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into a link target, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting via a crafted URL against anyone who clicks it, including administrators.","state":0,"publishedAt":"2026-10-11T06:00:19.131+00:00","modifiedAt":"2026-10-11T11:32:40.394+00:00","affected":[{"ecosystem":"Vendor product","name":"Subscribe to Comments","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"Subscribe to Comments\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.3.3\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://wpscan.com/vulnerability/1ed0314d-9871-4914-bb9c-ff894ea4c400/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-91829","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-91829","identifiers":["CVE-2026-91829"]},"retained":false,"historicalAffected":[]}],"coverage":[]}