CVE-2026-40734

INFO Priority: 0.00 BB Relevance: 0/100

Published: 2026-04-15 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zahlan Categories Images categories-images allows DOM-Based XSS.This issue affects Categories Images: from n/a through <= 3.3.1.

Weakness Classification (1)

CWE-79

References & Advisories (1)

https://patchstack.com/database/Wordpress/Plugin/categories-images/vulnerability/wordpress-categories-images-plugin-3-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.14%

Raw Score 0.001390

Percentile 3.2%

Date 2026-10-29

EPSS Trend

2026-10-29

0.00139

2026-10-28

0.00139

Intelligence Sources

nvd ref →

External Links

NVD (NIST) CVE Details FIRST EPSS API OSV.dev