Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-12
Knowledge Building - Security Vulnerability (CVE-2026-121862)
The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, and publishes them without moderation, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against any visitor of the affected posts, including administrators.
PLUGIN
Knowledge Building
CVE-2026-121862
Risk Score
Threat Entry
Updated 2026-11-12
Knowledge Building - Security Vulnerability (CVE-2026-121863)
The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users, and serves that response as HTML, leading to a Reflected Cross-Site Scripting.
PLUGIN
Knowledge Building
CVE-2026-121863
Risk Score