EIP-2026-113608
PRE-CVEWordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) - Regular Subscriber HTML Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113608. PoCs published by knull.
AI-analyzed exploit summary This writeup describes an HTML-injection vulnerability in multiple products, including WordPress, BuddyPress, and Blogs MU. The attack involves creating a group with maliciously crafted name and description fields, which are base64-encoded to bypass client-side validation and execute arbitrary script code in the context of the affected websites.
Description
WordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) - Regular Subscriber HTML Injection
Exploits (1)
This writeup describes an HTML-injection vulnerability in multiple products, including WordPress, BuddyPress, and Blogs MU. The attack involves creating a group with maliciously crafted name and description fields, which are base64-encoded to bypass client-side validation and execute arbitrary script code in the context of the affected websites.