CVE-2026-78333
12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event Log
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and outputting it back in an admin area page, leading to a Stored Cross-Site Scripting issue which could be used against high privilege users such as admin.
| Vendor | unknown |
| Product | 12 step meeting list |
| Published | Aug 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown 12 step meeting list
Be the first to know when new unknown vulnerabilities affecting unknown 12 step meeting list are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / 12 Step Meeting List
3.17 < 3.19.17
References
Credits
Huseyn WPScan