CVE-2026-96871Published
Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-96871 · Microsoft / collected KEV context
cve-program · CVE-2026-96871
- https://www.wordfence.com/threat-intel/vulnerabilities/id/8ae8d77c-cf52-442a-a273-9bca21db6e32?source=cve
- https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/skin-filters.php#L75
- https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/functions/func.api.php#L79
- https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/functions/func.api.php#L133
- https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/mb-actions.php#L520
- https://plugins.trac.wordpress.org/changeset?reponame=&old=3712357%40mangboard&new=3712357%40mangboard
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.