What is GHSA-m4gp-8vrv-j3cj?

GHSA-m4gp-8vrv-j3cj is a security advisory published by GitHub Security Advisories with Medium severity. The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied...

Which CVE IDs does GHSA-m4gp-8vrv-j3cj cover?

GHSA-m4gp-8vrv-j3cj covers the following CVE IDs: CVE-2026-86797. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m4gp-8vrv-j3cj?

GHSA-m4gp-8vrv-j3cj has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-m4gp-8vrv-j3cjMediumCVSS 6.8

The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied...

Vendor

GitHub Security Advisories

Published

October 14, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-86797 →

📋 Description

The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affected content.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-86797
https://wpscan.com/vulnerability/9a03a070-55a8-4d19-8bb3-e77ce6adc583
https://github.com/advisories/GHSA-m4gp-8vrv-j3cj