CVE-2026-11371 - BetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt Injection

CVE ID :CVE-2026-11371 Published : July 16, 2026, 6 a. m. | 58 minutes ago Description :The BetterDocs WordPress plugin before 4.

5. 5 does not sanitise an AI-generated documentation summary before storing and outputting it, and the feature that generates it is exposed to unauthenticated users, allowing them to store a malicious payload via prompt injection that executes in the browser of any visitor who views the affected page, including administrators. Severity: 0.