TI-2026-01503 CVE-2026-1827 · GHSA-9c75-pvwv-54wj
Cross-site scripting in luke-alford IDE Micro code-editor
Priority LOW 28
The Flask Micro code-editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's codeflask shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and ou…