CVE-2026-102378

Unauthenticated Cross Site Scripting (XSS) in Parallax Section block <= 2.0.4 versions.

Published Oct 1, 2026
CVSS 7.1 high
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

bPlugins Parallax Section block

CVE-2026-102378 at the National Vulnerability Database