CVE-2026-22192 | gVectors wpDiscuz up to 7.6.46 JSON Import customCss cross site scripting

A vulnerability classified as problematic was found in gVectors wpDiscuz up to 7.6.46. Affected by this vulnerability is an unknown functionality of the component JSON Import. Executing a manipulation of the argument customCss can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-22192. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.