CVE-2026-4083
The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘scoreboard’ shortcode in all versions up to, and including, 1.2. The shortcode function sfhg_shortcode() allows arbitrary HTML attributes to be added to the rendered
More information : https://plugins.trac.wordpress.org/browser/scoreboard-for-html5-game-lite/tags/1.2/scoreboard-for-html5-game-lite.php#L274
