CVE-2026-121863
Knowledge Building < 0.7.3 - Reflected XSS via Comment Reply Response
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users, and serves that response as HTML, leading to a Reflected Cross-Site Scripting.
| Vendor | unknown |
| Product | knowledge building |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown knowledge building
Be the first to know when new unknown vulnerabilities affecting unknown knowledge building are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Knowledge Building
0 < 0.7.3
References
Credits
WPScan