TI-2026-00395 CVE-2026-0594 · GHSA-j96m-g28p-cw7g
List Site Contributors <= 1.1.8 - Reflected Cross-Site Scripting via alpha
Priority LOW 29
The List Site Contributors plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'alpha' parameter in versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping…