CVE-2026-88782
Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an administrator previewing the unpublished submission.
| Vendor | unknown |
| Product | kubio ai page builder |
| Published | Oct 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown kubio ai page builder
Be the first to know when new unknown vulnerabilities affecting unknown kubio ai page builder are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Kubio AI Page Builder
0 < 2.9.3
References
Credits
Artus KG WPScan