TI-2026-85892 CVE-2026-119178 · GHSA-r989-vr5g-h5qp
Stored cross-site scripting in Smart Cookie Kit WordPress plugin
Priority LOW 24
The Smart Cookie Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping.