CVE-2026-93485
Named by 2 kept items in this workspace.
Search every workspace for CVE-2026-93485. It matches the name as written, so it can find other things that share it.
The items that name it 2
Stored XSS in WordPress comment rendering pipeline (wpautop() function in wp-includes/formatting.php) leading to full remote code execution; a mismatch between comment sanitization at save time and HTML reformatting at display time allows injection of live event handlers via a crafted anonymous comm
All cves in this workspace.