CVE-2025-11987: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

The Visual Link Preview plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's visual-link-preview shortcode in versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...