{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/advanced-views--display-framework-for-gutenberg--elementor--3.9.6/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:advanced_views:display_framework_for_gutenberg_\u0026_elementor:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-109995"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Advanced Views – Display Framework for Gutenberg \u0026 Elementor (\u003c= 3.9.6)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Advanced Views"],"content_html":"\u003cp\u003eThe Advanced Views - Display Framework for Gutenberg \u0026amp; Elementor plugin for WordPress (all versions up to and including 3.9.6) contains a Stored Cross-Site Scripting (XSS) vulnerability. Insufficient input sanitization and output escaping on the 'comment' parameter allow unauthenticated attackers to inject malicious web scripts.\u003c/p\u003e\n\u003cp\u003eThe vulnerability is accessible because the plugin's \u003ccode\u003eget_comment()\u003c/code\u003e function does not filter for comment approval status. Consequently, an attacker can submit a malicious script in a pending or unapproved comment, which will then execute when any visitor loads a page containing an \u003ccode\u003eavf-layout\u003c/code\u003e block associated with the attacker's comment ID, bypassing the need for administrative approval.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to execute arbitrary web scripts in the browsers of users visiting pages with affected layout blocks. This can lead to session hijacking, unauthorized actions performed on behalf of authenticated users, or redirection to malicious content.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the \u0026quot;Advanced Views - Display Framework for Gutenberg \u0026amp; Elementor\u0026quot; plugin to a version released after 3.9.6 that addresses the sanitization and validation failures in the \u003ccode\u003ecomment\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eMonitor WordPress web server logs for suspicious POST requests targeting the comment submission endpoint that contain script tags or character sequences common in XSS payloads (e.g., \u003ccode\u003e\u0026lt;script\u0026gt;\u003c/code\u003e, \u003ccode\u003eonerror\u003c/code\u003e, \u003ccode\u003eonload\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eReview existing and pending comments for malicious scripts if the plugin remains unpatched in the environment.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T13:49:08Z","date_published":"2026-10-27T13:49:08Z","id":"https://feed.craftedsignal.io/briefs/2026-10-advanced-views-xss/","summary":"The Advanced Views - Display Framework for Gutenberg \u0026 Elementor plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting via the comment parameter, allowing arbitrary script execution on pages containing affected layout blocks.","title":"Advanced Views: Stored Cross-Site Scripting in Display Framework (CVE-2026-109995)","url":"https://feed.craftedsignal.io/briefs/2026-10-advanced-views-xss/"}],"language":"en","title":"CraftedSignal Threat Feed - Advanced Views – Display Framework for Gutenberg \u0026 Elementor (\u003c= 3.9.6)","version":"https://jsonfeed.org/version/1.1"}