nicdark CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM nicdark CVE published 2026-10-22

CVE-2026-114702

A Cross Site Scripting (XSS) vulnerability exists in the WordPress ND Shortcodes For Visual Composer plugin versions up to 7.8. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability is identified as CVE-2026-114702 and affects versions of the plugin up to 7.8. Defenders should assess their exposure, especially if using versions up to [truncated]