CVE-2026-120540 | iubenda Plugin up to 3.13.6 on WordPress HTML Parser parse_comments HTML injection (EUVD-2026-118572)

A vulnerability, which was classified as problematic, was found in iubenda Plugin up to 3.13.6 on WordPress. This impacts the function iubendaParser::parse_comments of the component HTML Parser. The manipulation results in HTML injection.

This vulnerability is known as CVE-2026-120540. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More