TI-2026-19816 CVE-2026-24576 · GHSA-2rfr-c32c-x6p3
WordPress UX Flat plugin <= 5.4.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in COP UX Flat ux-flat allows Stored XSS.This issue affects UX Flat: from n/a through <= 5.4.0.