Search

Find a vulnerability

Search criteria

    10 vulnerabilities found for Mang Board by kitae-park

    CVE-2026-88043 (GCVE-0-2026-88043)

    Vulnerability from nvd – Published: 2026-10-15 05:30 – Updated: 2026-10-15 05:30
    VLAI
    Title
    Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
    Summary
    The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.0 (semver)
    		Create a notification for this product.
    Credits
    John Ryan Albon
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "John Ryan Albon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027data_type\u0027 parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T05:30:22.767Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/88d62d58-9d06-4a48-b76e-0265892107dc?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3690677/mangboard/trunk/includes/functions/func.api.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-01T00:00:00.000Z",
          "value": "Discovered"
        },
        {
          "lang": "en",
          "time": "2026-09-09T20:50:31.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-14T16:45:53.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board WP \u003c= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via \u0027data_type\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-88043",
    "datePublished": "2026-10-15T05:30:22.767Z",
    "dateReserved": "2026-09-09T20:35:12.726Z",
    "dateUpdated": "2026-10-15T05:30:22.767Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-107751 (GCVE-0-2026-107751)

    Vulnerability from nvd – Published: 2026-10-14 07:43 – Updated: 2026-10-14 07:43
    VLAI
    Title
    Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The save-time sanitizer mbw_htmlspecialchars2() is ineffective against this vector because the exploit payload relies solely on unquoted HTML attribute syntax using only spaces, alphanumerics, and characters such as =, parentheses, and dots — none of which are escaped.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.3 (semver)
    		Create a notification for this product.
    Credits
    leon figueira
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "leon figueira"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027user_name\u0027 parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The save-time sanitizer mbw_htmlspecialchars2() is ineffective against this vector because the exploit payload relies solely on unquoted HTML attribute syntax using only spaces, alphanumerics, and characters such as =, parentheses, and dots \u2014 none of which are escaped."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T07:43:34.349Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/72650c92-918a-4486-9365-11bcb6b6741a?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/templates/tpl.button.php#L75"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/skin-filters.php#L50"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L146"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-board.php#L24"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/mb-actions.php#L520"
        },
        {
          "url": "https://wordpress.org/plugins/mangboard/"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/templates/tpl.button.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-08T19:02:41.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-13T19:22:16.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via \u0027user_name\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-107751",
    "datePublished": "2026-10-14T07:43:34.349Z",
    "dateReserved": "2026-10-08T18:47:21.146Z",
    "dateUpdated": "2026-10-14T07:43:34.349Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-104909 (GCVE-0-2026-104909)

    Vulnerability from nvd – Published: 2026-10-14 07:43 – Updated: 2026-10-14 17:38
    VLAI
    Title
    Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request.
    Severity
    8.1 (High)
    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-14 17:38 UTC
    CWE
    • CWE-98 - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.3 (semver)
    		Create a notification for this product.
    Credits
    Wordfence PRISM
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-104909",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T17:38:35.488308Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T17:38:46.306Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Wordfence PRISM"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the \u0027\u003cmode\u003e_type (e.g. foo_type)\u0027 parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-98",
              "description": "CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program (\u0027PHP Remote File Inclusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T07:43:36.462Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/cbf1cbe0-4740-4d76-a3f5-7d2e1a64d4ee?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/class.board.php#L175"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/class.store.php#L124"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.board.php#L360"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/mangboard.php#L181"
        },
        {
          "url": "https://wordpress.org/plugins/mangboard/"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/includes/functions/func.board.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-02T16:11:58.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-13T19:23:16.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.3 - Unauthenticated Local File Inclusion via \u0027\u003cmode\u003e_type\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-104909",
    "datePublished": "2026-10-14T07:43:36.462Z",
    "dateReserved": "2026-10-02T15:56:52.111Z",
    "dateUpdated": "2026-10-14T17:38:46.306Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-104761 (GCVE-0-2026-104761)

    Vulnerability from nvd – Published: 2026-10-14 07:43 – Updated: 2026-10-14 14:28
    VLAI
    Title
    Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
    Severity
    6.4 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-14 14:27 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.3 (semver)
    		Create a notification for this product.
    Credits
    Wordfence PRISM
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-104761",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T14:27:30.679035Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T14:28:13.716Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Wordfence PRISM"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027content\u0027 parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T07:43:33.581Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/66a339e2-5744-4a12-8751-6e4662ddc347?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L160"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L156"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L144"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L142"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L78"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L134"
        },
        {
          "url": "https://wordpress.org/plugins/mangboard/"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/api/mb-template.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-02T12:44:54.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-13T19:22:13.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via \u0027content\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-104761",
    "datePublished": "2026-10-14T07:43:33.581Z",
    "dateReserved": "2026-10-02T12:29:22.235Z",
    "dateUpdated": "2026-10-14T14:28:13.716Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-96871 (GCVE-0-2026-96871)

    Vulnerability from nvd – Published: 2026-10-02 07:39 – Updated: 2026-10-03 15:42
    VLAI
    Title
    Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable on any board configured with the default write_level=0 (guest posting) and editor_type=N settings, which are the out-of-the-box defaults for newly created boards.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-03 15:34 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.2 (semver)
    		Create a notification for this product.
    Credits
    John Ryan Albon
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-96871",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-03T15:34:40.485595Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-03T15:42:49.248Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "John Ryan Albon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027data_type\u0027 parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable on any board configured with the default write_level=0 (guest posting) and editor_type=N settings, which are the out-of-the-box defaults for newly created boards."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T07:39:26.671Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8ae8d77c-cf52-442a-a273-9bca21db6e32?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/skin-filters.php#L75"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/functions/func.api.php#L79"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/functions/func.api.php#L133"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/mb-actions.php#L520"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?reponame=\u0026old=3712357%40mangboard\u0026new=3712357%40mangboard"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-23T18:28:23.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-01T19:16:29.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via \u0027data_type\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-96871",
    "datePublished": "2026-10-02T07:39:26.671Z",
    "dateReserved": "2026-09-23T18:13:18.413Z",
    "dateUpdated": "2026-10-03T15:42:49.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-88043 (GCVE-0-2026-88043)

    Vulnerability from cvelistv5 – Published: 2026-10-15 05:30 – Updated: 2026-10-15 05:30
    VLAI
    Title
    Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
    Summary
    The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.0 (semver)
    		Create a notification for this product.
    Credits
    John Ryan Albon
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "John Ryan Albon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027data_type\u0027 parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T05:30:22.767Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/88d62d58-9d06-4a48-b76e-0265892107dc?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3690677/mangboard/trunk/includes/functions/func.api.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-01T00:00:00.000Z",
          "value": "Discovered"
        },
        {
          "lang": "en",
          "time": "2026-09-09T20:50:31.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-14T16:45:53.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board WP \u003c= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via \u0027data_type\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-88043",
    "datePublished": "2026-10-15T05:30:22.767Z",
    "dateReserved": "2026-09-09T20:35:12.726Z",
    "dateUpdated": "2026-10-15T05:30:22.767Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-104909 (GCVE-0-2026-104909)

    Vulnerability from cvelistv5 – Published: 2026-10-14 07:43 – Updated: 2026-10-14 17:38
    VLAI
    Title
    Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request.
    Severity
    8.1 (High)
    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-14 17:38 UTC
    CWE
    • CWE-98 - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.3 (semver)
    		Create a notification for this product.
    Credits
    Wordfence PRISM
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-104909",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T17:38:35.488308Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T17:38:46.306Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Wordfence PRISM"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the \u0027\u003cmode\u003e_type (e.g. foo_type)\u0027 parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-98",
              "description": "CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program (\u0027PHP Remote File Inclusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T07:43:36.462Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/cbf1cbe0-4740-4d76-a3f5-7d2e1a64d4ee?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/class.board.php#L175"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/class.store.php#L124"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.board.php#L360"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/mangboard.php#L181"
        },
        {
          "url": "https://wordpress.org/plugins/mangboard/"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/includes/functions/func.board.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-02T16:11:58.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-13T19:23:16.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.3 - Unauthenticated Local File Inclusion via \u0027\u003cmode\u003e_type\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-104909",
    "datePublished": "2026-10-14T07:43:36.462Z",
    "dateReserved": "2026-10-02T15:56:52.111Z",
    "dateUpdated": "2026-10-14T17:38:46.306Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-107751 (GCVE-0-2026-107751)

    Vulnerability from cvelistv5 – Published: 2026-10-14 07:43 – Updated: 2026-10-14 07:43
    VLAI
    Title
    Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The save-time sanitizer mbw_htmlspecialchars2() is ineffective against this vector because the exploit payload relies solely on unquoted HTML attribute syntax using only spaces, alphanumerics, and characters such as =, parentheses, and dots — none of which are escaped.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.3 (semver)
    		Create a notification for this product.
    Credits
    leon figueira
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "leon figueira"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027user_name\u0027 parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The save-time sanitizer mbw_htmlspecialchars2() is ineffective against this vector because the exploit payload relies solely on unquoted HTML attribute syntax using only spaces, alphanumerics, and characters such as =, parentheses, and dots \u2014 none of which are escaped."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T07:43:34.349Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/72650c92-918a-4486-9365-11bcb6b6741a?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/templates/tpl.button.php#L75"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/skin-filters.php#L50"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L146"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-board.php#L24"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/mb-actions.php#L520"
        },
        {
          "url": "https://wordpress.org/plugins/mangboard/"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/templates/tpl.button.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-08T19:02:41.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-13T19:22:16.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via \u0027user_name\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-107751",
    "datePublished": "2026-10-14T07:43:34.349Z",
    "dateReserved": "2026-10-08T18:47:21.146Z",
    "dateUpdated": "2026-10-14T07:43:34.349Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-104761 (GCVE-0-2026-104761)

    Vulnerability from cvelistv5 – Published: 2026-10-14 07:43 – Updated: 2026-10-14 14:28
    VLAI
    Title
    Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
    Severity
    6.4 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-14 14:27 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.3 (semver)
    		Create a notification for this product.
    Credits
    Wordfence PRISM
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-104761",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T14:27:30.679035Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T14:28:13.716Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Wordfence PRISM"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027content\u0027 parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T07:43:33.581Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/66a339e2-5744-4a12-8751-6e4662ddc347?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L160"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L156"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L144"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L142"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L78"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L134"
        },
        {
          "url": "https://wordpress.org/plugins/mangboard/"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/api/mb-template.php"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-02T12:44:54.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-13T19:22:13.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via \u0027content\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-104761",
    "datePublished": "2026-10-14T07:43:33.581Z",
    "dateReserved": "2026-10-02T12:29:22.235Z",
    "dateUpdated": "2026-10-14T14:28:13.716Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-96871 (GCVE-0-2026-96871)

    Vulnerability from cvelistv5 – Published: 2026-10-02 07:39 – Updated: 2026-10-03 15:42
    VLAI
    Title
    Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
    Summary
    The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable on any board configured with the default write_level=0 (guest posting) and editor_type=N settings, which are the out-of-the-box defaults for newly created boards.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-03 15:34 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Wordfence CNA under the mitre root
    CNA scorecard C 65/100 over 2194 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kitae-park Mang Board Affected: 0 , ≤ 2.4.2 (semver)
    		Create a notification for this product.
    Credits
    John Ryan Albon
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-96871",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-03T15:34:40.485595Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-03T15:42:49.248Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mang Board",
          "vendor": "kitae-park",
          "versions": [
            {
              "lessThanOrEqual": "2.4.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "John Ryan Albon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u0027data_type\u0027 parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable on any board configured with the default write_level=0 (guest posting) and editor_type=N settings, which are the out-of-the-box defaults for newly created boards."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T07:39:26.671Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8ae8d77c-cf52-442a-a273-9bca21db6e32?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/skin-filters.php#L75"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/functions/func.api.php#L79"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/functions/func.api.php#L133"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.2/includes/mb-actions.php#L520"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?reponame=\u0026old=3712357%40mangboard\u0026new=3712357%40mangboard"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-23T18:28:23.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-10-01T19:16:29.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Mang Board \u003c= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via \u0027data_type\u0027 Parameter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-96871",
    "datePublished": "2026-10-02T07:39:26.671Z",
    "dateReserved": "2026-09-23T18:13:18.413Z",
    "dateUpdated": "2026-10-03T15:42:49.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}