TI-2025-12665 CVE-2025-13857 · GHSA-2mjp-94g9-v98c
Cross-site scripting in ksakai Yet Another WebClap for WordPress
Priority LOW 28
The Yet Another WebClap for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' parameter of the webclap_button shortcode in all versions up to, and including, 0.2 due to insufficie…