What is GHSA-6g7j-p76q-h89g?

GHSA-6g7j-p76q-h89g is a security advisory published by GitHub Security Advisories with unknown severity. The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape...

Which CVE IDs does GHSA-6g7j-p76q-h89g cover?

GHSA-6g7j-p76q-h89g covers the following CVE IDs: CVE-2026-17005. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-6g7j-p76q-h89gunknown

The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape...

Vendor

GitHub Security Advisories

Published

October 4, 2026

Last Modified

October 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-17005 →

📋 Description

The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page (Contributor and above, once permitted) to perform Stored Cross-Site Scripting attacks that execute in the browser of anyone viewing the announcement.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-17005
https://wpscan.com/vulnerability/e3973475-18c4-46a0-b0ca-24e4d2cd58ca
https://github.com/advisories/GHSA-6g7j-p76q-h89g