TI-2025-04981 CVE-2025-5541 · GHSA-xv9g-3r88-mqc5
Runners Log <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Runners Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'runnerslog' shortcode in all versions up to, and including, 3.9.2 due to insufficient input sanitization and output esca…