网安资讯详情 - SecLens 情报雷达

CVE-2026-13400 | Simply Schedule Appointments Plugin up to 1.6.12.2 on WordPress Notification Rendering wp_kses_post cross site scripting

来源： vuldb · 发布时间 2026-07-27 14:37 (UTC+08:00) · 抓取时间 2026-07-27 15:00 (UTC+08:00)

原文链接

摘要

A vulnerability was found in <a href="https://vuldb.com/product/simply_schedule_appointments_plugin">Simply Schedule Appointments Plugin up to 1.6.12.2</a> on WordPress and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. Impacted is the function <code>wp_kses_post</code> of the component <em>Notification Rendering</em>. Such manipulation leads to cross site scripting. This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-13400">CVE-2026-13400</a>. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

标签

• CVE-2026-13400

扩展字段

{
  "raw_pub_date": "Mon, 27 Jul 2026 08:37:53 +0200"
}