CVE-2026-5324 | themefusecom Brizy Plugin up to 2.8.11 on WordPress FileUpload api.php html_entity_decode cross site scripting

A vulnerability described as problematic has been identified in themefusecom Brizy Plugin up to 2.8.11 on WordPress. Affected by this issue is the function html_entity_decode of the file api.php of the component FileUpload Handler. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-5324. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.