bmarshall511 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH bmarshall511 CVE published 2026-09-25

CVE-2026-96752

The Zero Spam for WordPress plugin is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts, which will execute when a user accesses an injected page. The vulnerability is caused by insufficient input sanitization and output escaping in the Zero Spam for WordPress plugin. The payload is delivered by submitt [truncated]