SZB-ad842a86e6
EUVD lists unauthenticated XSS in Mang Board WP 2.4.6 and earlier
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Kitae Park
- Product
- Mang Board WP
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-114307, as relayed in a Mastodon post, describes an unauthenticated cross-site scripting flaw in Mang Board WP versions up to 2.4.6. The entry gives a CVSS v3.1 score of 7.1 and was last updated 2026-10-30.
If you use Kitae Park
Update Mang Board WP to a version later than 2.4.6 if one is available
Review board posts for injected scripts
Deactivate the plugin if no fixed version is available
What the sources say 1
· Mastodon: “Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.” Source