A vulnerability marked as problematic has been reported in bensibley Independent Analytics Plugin up to 2.15.0 on WordPress. This affects the function get_cell_content of the file /iawp/search of the component URL Rendering. Performing a manipulation of the argument not_found_url results in cross site scripting.

This vulnerability is cataloged as CVE-2026-17506. It is possible to initiate the attack remotely. There is no exploit available.