VYPR

Scoreboard for HTML5 Games Lite

by WordPress

CVEs (1)

  • CVE-2026-4083MedMar 21, 2026
    risk 0.42cvss 6.4epss 0.00

    The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2. The shortcode function sfhg_shortcode() allows arbitrary HTML attributes to be added to the rendered…