CVE-2026-110384

Published 17 October 2026 · tracked since 17 October 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fancy Comments WordPress fancy-facebook-comments allows Reflected XSS.This issue affects Fancy Comments WordPress: from n/a through 1.2.21.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-109983 MEDIUM 6.4
• CVE-2026-110253 MEDIUM 5.4
• CVE-2026-111110 HIGH 7.2
• CVE-2026-100316 HIGH 7.2
• CVE-2026-92715 MEDIUM 4.3
• CVE-2026-92798 HIGH 8.1
• CVE-2026-92978 MEDIUM 4.3
• CVE-2026-96660 HIGH 7.2
• CVE-2026-110268 MEDIUM 4.9
• CVE-2026-111726 MEDIUM 6.4

→ Open the live CVE board · all tools