CVE-2026-122666highCWE-79

CVE-2026-122666: high-severity vulnerability in Kitae Park Mang Board WP

WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Mang Board WP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Reflected XSS.This issue affects Mang Board WP: from n/a through 2.4.7.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
Kitae Park · Mang Board WP
Related CVEs — Kitae Park Mang Board WP

In the same product, most dangerous first.

CVE-2026-111834CRITICALWordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2024-56296HIGHWordPress Mang Board WP plugin <= 1.8.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-109698CRITICALWordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-94176HIGHWordPress Mang Board WP plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-61974HIGHWordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-84770HIGHWordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%