Cpe:2.3:a:gijo_varghese:flying_images:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3agijo_vargheseflying_images/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 11:39:50 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGijo Varghese Flying Images: Stored Cross-Site Scripting (CVE-2026-121780)https://feed.craftedsignal.io/briefs/2026-11-flying-images-xss-3294e673/Mon, 09 Nov 2026 11:39:50 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-flying-images-xss-3294e673/The Flying Images plugin (versions n/a through 2.4.15) contains a Stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.<p>The Gijo Varghese Flying Images plugin is vulnerable to Stored Cross-site Scripting (XSS). This vulnerability exists due to improper neutralization of input during web page generation. The issue affects all versions from n/a through 2.4.15.</p> highadvisory