CVE-2026-125783
Last modified
CVE-2026-125783 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madalin.ungureanu Custom Post Types and Custom Fields creator – WCK wck-custom-fields-and-custom-post-types-creator allows Reflected XSS.This issue affects Custom Post Types and Custom Fields creator – WCK: from n/a through 2.4.0..
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madalin.ungureanu Custom Post Types and Custom Fields creator – WCK wck-custom-fields-and-custom-post-types-creator allows Reflected XSS.This issue affects Custom Post Types and Custom Fields creator – WCK: from n/a through 2.4.0.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-125783?
How severe is CVE-2026-125783?
How do I fix CVE-2026-125783?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-125776Missing Authorization vulnerability in Cozmoslabs Profile Bu…5.3
- CVE-2026-125777Insertion of Sensitive Information Into Sent Data vulnerabil…5.3
- CVE-2026-125778Improper Neutralization of Script-Related HTML Tags in a Web…4.3
- CVE-2026-12578The affected product is vulnerable to a deserialization of u…8.4
- CVE-2026-125781Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2026-125782Missing Authorization vulnerability in Blubrry Podcasting Po…4.3
- CVE-2026-125784Cross-Site Request Forgery (CSRF) vulnerability in Magnigeni…8.8
- CVE-2026-125785Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2026-125786Improper Neutralization of Script-Related HTML Tags in a Web…5.3
- CVE-2026-125787Missing Authorization vulnerability in ExpressTech Quiz And …5.4
- CVE-2026-12579AS228T with Authentication Bypass Vulnerability7.4
- CVE-2026-125792Missing Authorization vulnerability in Andy Moyle Church Adm…5.3
Are you affected by CVE-2026-125783?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST