---
id: "CVE-2026-122665"
page: "https://infrastack.ai/live/CVE-2026-122665"
kind: "vulnerability"
aliases: ["CVE-2026-122665"]
title: "Mang Board WP: stored cross-site scripting through 2.4.7 lets attackers run scripts"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Mang Board WP", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["mang-board-wp", "other", "wordpress"]
not_affected_if: ["plugin-not-installed"]
published_at: "2026-11-09T11:17:23+00:00"
first_seen_at: "2026-11-09T11:26:03+00:00"
updated_at: "2026-11-09T11:26:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122665", "first_seen_at": "2026-11-09T11:26:03+00:00"}]
exploit_sources: []
---

# Mang Board WP: stored cross-site scripting through 2.4.7 lets attackers run scripts

Link for people: https://infrastack.ai/live/CVE-2026-122665 (this .md is for agents)

Mang Board WP, a WordPress bulletin board plugin by Kitae Park, fails to neutralize input when generating pages, enabling stored XSS. An attacker can plant script that runs in the browser of anyone who views the affected page.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Mang Board WP affected range not listed fixed no fixed version listed

## How to check

- Check the installed version of the Mang Board WP plugin in the WordPress admin under Plugins; versions through `2.4.7` are listed as affected.

## Fix

- Versions through `2.4.7` are affected; the sources do not name a fixed version.

## Timeline

- 2026-11-09T11:26:03+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122665

## From the sources

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Stored XSS.This issue affects Mang Board WP: from n/a through 2.4.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_