What is GHSA-wfjc-xr6c-c6vw?

GHSA-wfjc-xr6c-c6vw is a security advisory published by GitHub Security Advisories with Medium severity. The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an...

Which CVE IDs does GHSA-wfjc-xr6c-c6vw cover?

GHSA-wfjc-xr6c-c6vw covers the following CVE IDs: CVE-2026-89307. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-wfjc-xr6c-c6vwMedium

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an...

Vendor

GitHub Security Advisories

Published

September 15, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-89307 →

📋 Description

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-89307
https://github.com/italia/design-scuole-wordpress-theme
https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-
https://github.com/advisories/GHSA-wfjc-xr6c-c6vw