Miembros de
Boletines de Vulnerabilidades |
CVE-2026-11597 |
|
| Software afectado | WORDPRESS |
| The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'infusionsoft-form' shortcode in versions up to, and including, 2.0.1. This is due to insufficient input sanitization and output escaping on user-supplied 'account' and 'id' shortcode attributes in the surbma_infusionsoft_shortcode_shortcode() function, which are concatenated directly into a | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-11597 | |
