PatchSiren

uicore CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM uicore CVE published 2026-04-08

CVE-2026-39708

CVE-2026-39708 is a Stored XSS vulnerability in the UiCore Elements plugin, affecting versions up to and including 1.3.14. The vulnerability has a CVSS score of 6.5 and a severity of MEDIUM. The CVE record was published on 2026-04-08T09:16:43.620Z and was last modified on 2026-07-24T20:10:00.147Z. This vulnerability is caused by improper neutralization of input during web page generation, allowing for sto [truncated]