{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2026-10-07T18:57:23.834Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive."
            }
          ],
          "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2026-39768",
    "datePublished": "2026-10-06T08:34:31.879Z",
    "dateRejected": "2026-10-07T18:57:23.834Z",
    "dateReserved": "2026-04-07T10:59:05.602Z",
    "dateUpdated": "2026-10-07T18:57:23.834Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"21595511-bba5-4825-b968-b78d1f9984a3\", \"shortName\": \"Patchstack\", \"dateUpdated\": \"2026-10-06T08:34:31.879Z\"}, \"title\": \"WordPress Security \u0026 Malware scan by CleanTalk plugin \u003c= 2.189 - Cross Site Scripting (XSS) vulnerability\", \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"cweId\": \"CWE-79\", \"description\": \"CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)\", \"type\": \"CWE\"}]}], \"impacts\": [{\"capecId\": \"CAPEC-592\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-592 Stored XSS\"}]}], \"affected\": [{\"vendor\": \"CleanTalk Inc\", \"collectionURL\": \"https://wordpress.org/plugins\", \"defaultStatus\": \"unaffected\", \"packageName\": \"security-malware-firewall\", \"product\": \"Security \u0026 Malware scan by CleanTalk\", \"versions\": [{\"lessThanOrEqual\": \"2.189\", \"status\": \"affected\", \"version\": \"n/a\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"Unauthenticated Cross Site Scripting (XSS) in Security \u0026 Malware scan by CleanTalk \u003c= 2.189 versions.\"}], \"value\": \"Unauthenticated Cross Site Scripting (XSS) in Security \u0026 Malware scan by CleanTalk \u003c= 2.189 versions.\"}], \"references\": [{\"tags\": [\"vdb-entry\"], \"url\": \"https://patchstack.com/database/wordpress/plugin/security-malware-firewall/vulnerability/wordpress-security-malware-scan-by-cleantalk-plugin-2-189-cross-site-scripting-xss-vulnerability?_s_id=cve\"}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV3_1\": {\"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"LOW\", \"version\": \"3.1\", \"baseSeverity\": \"HIGH\", \"baseScore\": 7.1, \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\"}}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"user\": \"00000000-0000-4000-9000-000000000000\", \"value\": \"Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program\"}], \"source\": {\"discovery\": \"EXTERNAL\"}, \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-39768\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-06T10:24:56.171091Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-06T10:29:52.302Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-39768\", \"assignerOrgId\": \"21595511-bba5-4825-b968-b78d1f9984a3\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"Patchstack\", \"dateReserved\": \"2026-04-07T10:59:05.602Z\", \"datePublished\": \"2026-10-06T08:34:31.879Z\", \"dateUpdated\": \"2026-10-06T10:31:36.347Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}