EUVD-2026-43380Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Unauthenticated network DOM-XSS needing victim interaction (UI:R); scope changes to the browser session (S:C) with limited C/I/A impact typical of XSS, matching the reported vector.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Lifecycle Timeline
2DescriptionCVE.org
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through <= 3.9.4.
AnalysisAI
Stored/DOM-based cross-site scripting in the tagDiv Cloud Library (td-cloud-library) WordPress plugin, versions up to and including 3.9.4, allows remote unauthenticated attackers to execute arbitrary JavaScript in a victim's browser when the victim interacts with a crafted input, per the CVSS PR:N/UI:R vector. Because the scope is changed (S:C), the injected script can affect resources beyond the vulnerable component - for example hijacking an authenticated administrator session. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires victim interaction (CVSS UI:R) - a user, most impactfully an authenticated WordPress administrator, must load or interact with attacker-controlled input processed by the td-cloud-library client-side rendering code, so this is not fully hands-off. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are moderate and internally consistent rather than alarming. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a malicious cloud-library asset or a link/input that, when loaded and interacted with by a logged-in WordPress administrator, causes the plugin's client-side code to write an unsanitized payload into the DOM. The script then runs in the admin's session context and, because scope is changed, can create a rogue admin account or exfiltrate session tokens. … |
| Remediation | No vendor-released patch version is identified in the available data; the advisory indicates the flaw affects up to and including 3.9.4, so administrators should upgrade to the next release above 3.9.4 once tagDiv publishes it and monitor the Patchstack advisory (https://patchstack.com/database/Wordpress/Plugin/td-cloud-library/vulnerability/wordpress-tagdiv-cloud-library-plugin-3-9-4-cross-site-scripting-xss-vulnerability) and tagDiv's theme update channel for the fixed build. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct an inventory of all WordPress installations to identify whether tagDiv Cloud Library is deployed and immediately disable or remove the plugin if business requirements permit. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today