TI-2025-12525 CVE-2025-13704 · GHSA-4x85-44wj-rgh5
Cross-site scripting in amirshk Autogen Headers Menu
Priority LOW 28
The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'head_class' parameter of the 'autogen_menu' shortcode in all versions up to, and including, 1.0.1 due to insufficient in…