What is GHSA-hx8w-hx4q-frph?

GHSA-hx8w-hx4q-frph is a security advisory published by GitHub Security Advisories with High severity. The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in...

Which CVE IDs does GHSA-hx8w-hx4q-frph cover?

GHSA-hx8w-hx4q-frph covers the following CVE IDs: CVE-2026-105316. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hx8w-hx4q-frph?

GHSA-hx8w-hx4q-frph has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-hx8w-hx4q-frphHighCVSS 7.1

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in...

Vendor

GitHub Security Advisories

Published

October 7, 2026

Last Modified

October 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-105316 →

📋 Description

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-105316
https://wpscan.com/vulnerability/8240033a-bb4b-490f-97da-4ae768d2cb6d
https://github.com/advisories/GHSA-hx8w-hx4q-frph