What is GHSA-8vww-hgq3-gp87?

GHSA-8vww-hgq3-gp87 is a security advisory published by GitHub Security Advisories with High severity. The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values...

Which CVE IDs does GHSA-8vww-hgq3-gp87 cover?

GHSA-8vww-hgq3-gp87 covers the following CVE IDs: CVE-2026-87780. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8vww-hgq3-gp87?

GHSA-8vww-hgq3-gp87 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-8vww-hgq3-gp87HighCVSS 8.8

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values...

Vendor

GitHub Security Advisories

Published

October 10, 2026

Last Modified

October 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-87780 →

📋 Description

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-87780
https://wpscan.com/vulnerability/94448385-65df-4466-8251-d939275b6604
https://github.com/advisories/GHSA-8vww-hgq3-gp87