CPE

Cpe:2.3:a:wp-Flying-Scripts:flying_scripts:::*:::wordpress::

1 brief RSS

Stored Cross-Site Scripting in Flying Scripts WordPress Plugin

An unauthenticated stored XSS vulnerability in the Flying Scripts WordPress plugin (CVE-2026-109990) allows attackers to execute arbitrary JavaScript by bypassing core sanitization through an output-buffer rewriter.

Flying Scripts: Delay JavaScript to Improve Site Speed & Performance web-application xss wordpress cve-2026-109990

1t 1c 7m ago

Cpe:2.3:a:wp-Flying-Scripts:flying_scripts:*:*:*:*:*:wordpress:*:*

Stored Cross-Site Scripting in Flying Scripts WordPress Plugin

Cpe:2.3:a:wp-Flying-Scripts:flying_scripts:::*:::wordpress::