TI-2025-12651 CVE-2025-13843 · GHSA-g3qm-3r24-6x8g
Cross-site scripting in susantabeura VigLink SpotLight By ShortCode
Priority LOW 28
The VigLink SpotLight By ShortCode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'float' parameter of the 'spotlight' shortcode in all versions up to, and including, 1.0.a due to insufficient…