Skip to content

Digiblogger Buddyholis Listsearch vulnerabilities

digiblogger buddyholis listsearchBuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode AttributeCVE-2026-18536.4 MediumFebruary 11, 2026