VULNERABILITY INTELLIGENCE

CVE-2026-112313

CVSS score7.1 HIGH

EPSS probability0.22%

CISA KEVNot currently listed

Published2026-10-22

Last modified2026-10-22

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7.