TI-2025-11659 CVE-2025-12717 · GHSA-9cp6-mvxf-jv2v
Cross-site scripting in cgrymala List Attachments Shortcode
Priority LOW 28
The List Attachments Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_list' parameter in the [list-attachments] shortcode in all versions up to, and including, 0.4.1a due to ins…