CVE-2026-27054 in PenciDesign Penci Soledad Data Migrator Plugin
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Soledad Data Migrator penci-data-migrator allows Reflected XSS.This issue affects Penci Soledad Data Migrator: from n/a through <= 1.3.1.
Responsible
Patchstack
Reservation
02/17/2026
Disclosure
03/25/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 353445 | PenciDesign Penci Soledad Data Migrator Plugin cross site scripting | 79 | Not defined | Not defined | CVE-2026-27054 |