CVE-2026-97279MEDIUM NVDCVSS Score 6.5Severity MEDIUMPublished Sep 30, 2026Vendor unknownDescriptionContributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/polylang/vulnerability/wordpress-polylang-plugin-3-8-9-cross-site-scripting-xss-vulnerability?_s_id=cve