p PatchFirst

CVE-2026-111844

CVE-2026-111844 · WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23.

CVSS 6.5 · Medium · EPSS 0.2%

Published
Updated

Affected products and versions

  • brizy

    Versions
    • 2.8.23: Affected

    No fix published

Original sources

Check your server →