AI Score
Confidence
High
EPSS
Percentile
28.5%
Description The plugin does not properly sanitize the ‘className’ parameter, leading to Stored Cross-Site Scripting. Insufficient input sanitization and output escaping make it possible for contributors to inject arbitrary web scripts into pages.
www.wordfence.com/threat-intel/vulnerabilities/id/35bd7462-8dab-43b2-9941-fef6f826cfdc