CVE-2026-73382

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Site Reviews versions up to 8.2.0.

An attacker can inject malicious script that executes in the user's browser, potentially leading to data theft or session hijacking.

Update the Site Reviews plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.