TI-2025-05861 CVE-2025-6460 · GHSA-4wq4-57x2-fmhv
Cross-site scripting in gserafini Display During Conditional Shortcode
Priority LOW 28
The Display During Conditional Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and…