low3.5
CVE-2026-2825
A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8.
Impact
A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8. This impacts the function fix_html of the file tools/fix.py of the component Article Module. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions |
|---|---|
| Rachelos WeRSS We-Mp-Rss | before 1.4.8. |
Versions were read from the advisory text. No structured product data has been published for this record yet.