CVE-2026-88788

The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify that a user may edit the target post, allowing users with contributor-level access or above to store JavaScript that...

Cross-site scripting vulnerability in wordpress plugin text-styler

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin text-styler has a cross-site scripting vulnerability due to improper filtering of user input, which allo...