THREAT OPS › Threat News › [NVD] CVE-2026-83544 (MEDIUM 6.8) — The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.
[NVD] CVE-2026-83544 (MEDIUM 6.8) — The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.
CVE-2026-83544 CVSS: 6.8 MEDIUM Published: 2026-09-05T07:17:13.373
The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.
Indicators of compromise
- CVE-2026-83544cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-83544