VULNERABILITY INTELLIGENCE
CVE-2026-14190
CVSS score6.1 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-07-27
Last modified2026-07-27
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79