TI-2026-73795 CVE-2026-97020 · GHSA-5c2x-59qc-4m85
Stored cross-site scripting in PO/MO Editor WordPress plugin
Priority LOW 28
The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping.