Description Lack of escaping leads to an XSS vulnerability in the generic image output layout. Remediation References CVE-2026-48953 Related Vulnerabilities WordPress Plugin Podlove Podcast Publisher Cross-Site Request Forgery (3.8.3) WordPress Plugin WP Custom Pages 'url' Parameter Local File Disclosure (0.5.0.1) SharePoint Improper Authorization Vulnerability (CVE-2026-58277) Oracle JRE CVE-2013-1564 Vulnerability (CVE-2013-1564) Drupal Core 8.7.0 Directory Traversal (8.7.0) Severity Medium Classification CVE-2026-48953 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities