Tag

Cve-2026-96682

1 brief RSS

Stored XSS in Presto Player WordPress Plugin

The Presto Player WordPress plugin is vulnerable to Stored Cross-Site Scripting via the presto-player tag, allowing unauthenticated attackers to execute arbitrary web scripts.

Presto Player web-application xss wordpress cve-2026-96682

1t 1c 1h ago