CVE-2016-1000140: New-Year-Firework Project New-Year-Firework

Medium severity, CVSS 6.1. EPSS: 3.4% chance of exploitation in the next 30 days.

Reflected XSS in wordpress plugin new-year-firework v1.1.9

Affected products

• New-Year-Firework Project New-Year-Firework: up to and including 1.1.9

Published 2016-10-10. Last modified 2026-06-17.