CVE-2026-119054 | meisle Multiple Pages Generator Plugin up to 4.2.4 Shortcode html_entity_decode base-url cross site scripting

October 29, 2026 Yanac

A vulnerability has been found in meisle Multiple Pages Generator Plugin up to 4.2.4 and classified as problematic. Affected by this vulnerability is the function html_entity_decode of the component Shortcode Handler. The manipulation of the argument base-url leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-119054. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More