TI-2025-12295 CVE-2025-13448 · GHSA-26xf-664m-jmwq
Cross-site scripting in anastis CSSIgniter Shortcodes
Priority LOW 28
The CSSIgniter Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element' shortcode attribute in all versions up to, and including, 2.4.1 due to insufficient input sanitization and out…