TI-2026-67469 CVE-2026-92767 · GHSA-265f-7jp6-5v2f
Cross-site scripting in zayedbaloch Twenty20 Image Before-After
Priority LOW 28
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and ou…