← Back

Dna88

dna88

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Highlight
highlight

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dna88
1Highlight
Jun 17, 2026
Sep 6, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed