WordPress PullQuote plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Gilang - DJ in WordPress Plugin PullQuote versions = 1.0...

PT-2026-1725

Name of the Vulnerable Software and Affected Versions PullQuote versions prior to 1.1 Description The PullQuote plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'pullquote' shortcode. Insufficient input sanitization and output escaping on user-supplied attributes...

WordPress plugin PullQuote 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...