CVE-2026-56347Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fields that execute for all site visitors, potentially stealing session cookies or performing unauthorized actions.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud136d
Disclosure
🚨*CVE* CVE-2026-56347 AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes,… https://www.cve.org/CVERecord?id=CVE-2026-56347 ----- Traducción: CVE-2026-56347 AVi… http://infoflow.cloud`
Post summary
The post announces CVE-2026-56347, describing a stored XSS flaw in the AVideo TopMenu plugin, but does not provide PoC, exploit code, or patch information.
0000034
88 followersView on X
CVE@CVEnew136d
Disclosure
CVE-2026-56347 AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes,… https://www.cve.org/CVERecord?id=CVE-2026-56347
Post summary
The post discloses CVE-2026-56347, a stored XSS flaw in AVideo TopMenu 26.0, but offers no proof of concept, exploit code, patch, or evidence of active exploitation.
00000266
57.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-56347 Stored Cross-Site Scripting in AVideo TopMenu Plugin Through Version 26.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56347
Post summary
A newly identified stored XSS vulnerability affects the AVideo TopMenu Plugin through version 26.0; no PoC or exploit details are provided, and no patch or active exploitation information is included.
0000046
4.1K followersView on X

Explore more

Back to dashboard