CVE-2026-17577 | SSL Zen Plugin up to 4.7.42 on WordPress getMessages uri/host cross site scripting

September 25, 2026 Yanac

A vulnerability was found in SSL Zen Plugin up to 4.7.42 on WordPress. It has been classified as problematic. This impacts the function ssl_zen_messages::getMessages. Performing a manipulation of the argument uri/host results in cross site scripting.

This vulnerability is cataloged as CVE-2026-17577. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More