Unrated severityNVD Advisory· Published Nov 11, 2026

CVE-2026-121863

Description

The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users, and serves that response as HTML, leading to a Reflected Cross-Site Scripting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Knowledge Buildingllm-create
Range: <0.7.3

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/80b4b9d0-e48b-4f24-b4bd-71dc37ac1602/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000