NVD security advisoryHigh
High advisory for Improper Neutralization of Input During
CVE-2026-66570 · Reported 1 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Improper Neutralization of Input DuringAffected product
Advisory overview
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1.
