Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-17005— Horizontal Scrolling Announcements <= 2.6 - Contributor+ Stored XSS via Style Field

Quick assessment

Affected
Unknown Horizontal scrolling announcements
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 插件 Horizontal scrolling announcements 在 2.6 及更早版本中，未对其某项公告设置进行适当的清理和转义，便将其输出到前端页面的属性上下文中。这一缺陷使得拥有公告管理页面访问权限的用户（贡献者及以上权限，且需在启用相应权限后）能够实施存储型跨站脚本攻击（Stored XSS），当任何用户在前端查看该公告时，恶意脚本将在其浏览器中执行。

AI Predicted 6.1 Difficulty: Moderate
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-17005

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Horizontal Scrolling Announcements <= 2.6 - Contributor+ Stored XSS via Style Field
Source: CVE Program / CVE List V5
Vulnerability Description
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page (Contributor and above, once permitted) to perform Stored Cross-Site Scripting attacks that execute in the browser of anyone viewing the announcement.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Unknown Horizontal scrolling announcements 0 ~ 2.6 -

II. Public POCs for CVE-2026-17005

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-17005

请登录查看更多情报信息。

Other References for CVE-2026-17005 (1)

Same Patch Batch · Unknown · 2026-10-04 · 6 CVEs total

CVE-2026-93549 CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass
CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite
CVE-2026-86817 Five Star Business Profile and Schema 2.3.20 - 2.3.21 - Author+ Sensitive Data Disclosure
CVE-2026-104118 Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR
CVE-2026-104119 Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials

IV. Related Vulnerabilities

Same product: Horizontal scrolling announcements
Same vendor: Unknown

V. Comments for CVE-2026-17005

No comments yet

Leave a comment