Product

Flying Scripts: Delay JavaScript to Improve Site Speed & Performance (<= 1.2.4)

1 brief RSS

Stored Cross-Site Scripting in Flying Scripts WordPress Plugin

An unauthenticated stored XSS vulnerability in the Flying Scripts WordPress plugin (CVE-2026-109990) allows attackers to execute arbitrary JavaScript by bypassing core sanitization through an output-buffer rewriter.

Flying Scripts: Delay JavaScript to Improve Site Speed & Performance web-application xss wordpress cve-2026-109990

1t 1c 7m ago