CVE-2026-109385 | Posimythmes UiChemy Plugin up to 5.3.0 on WordPress cross site scripting

October 28, 2026 Yanac

A vulnerability marked as problematic has been reported in Posimythmes UiChemy Plugin up to 5.3.0 on WordPress. Affected is an unknown function. Performing a manipulation of the argument actions[save_builder][data][elements][…][settings][slot_{N}_link][url] results in cross site scripting.

This vulnerability is reported as CVE-2026-109385. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More