CVE-2026-13701
Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis Setting
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators (including those without the unfiltered_html capability, such as on multisite) to perform Stored Cross-Site Scripting attacks that execute in the context of any visitor viewing affected pages.
| Vendor | unknown |
| Product | advanced excerpt |
| Published | Aug 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown advanced excerpt
Be the first to know when new unknown vulnerabilities affecting unknown advanced excerpt are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Advanced Excerpt
0 < 4.5
References
Credits
Mustafa Ahmed WPScan