What is CVE-2026-27403?
A Stored Cross-site Scripting (XSS) vulnerability has been discovered in the Hubbub Lite plugin by NerdPress, affecting versions up to 1.36.3. This issue arises from improper neutralization of input during web page generation. Updating the plugin to the latest version is recommended.
Azərbaycanca: NerdPress-in Hubbub Lite plaginində (1.36.3-ə qədər versiyalar) Saxlanılan XSS (Stored Cross-site Scripting) zəifliyi aşkarlanıb. Bu, veb səhifənin yaradılması zamanı daxil olan məlumatların düzgün neytrallaşdırılmaması səbəbindən baş verir. Plaginin son versiyasına yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
Which plugin by NerdPress is affected by CVE-2026-27403?
The Hubbub Lite plugin is affected.
What mitigation is recommended for CVE-2026-27403?
Updating the plugin to the latest version is recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.