TI-2025-10820 CVE-2025-11803 · GHSA-gpg9-q2f2-qpjr
WPSite Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The WPSite Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'format' shortcode attribute in the wpsite_y shortcode and the 'before' attribute in the wpsite_postauthor shortcode in all v…