CyberRota Analysis
AI-GeneratedThe Child Pages Card WordPress plugin prior to version 1.09 is vulnerable due to inadequate sanitization and escaping of certain shortcode attributes, enabling users with contributor roles and higher to execute Stored Cross-Site Scripting (XSS) attacks. This vulnerability can lead to unauthorized script execution in the context of the affected site, potentially compromising user data and site integrity. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its shortcode attributes before outputting them back in a page, allowing users with the contributor role and above to perform Stored Cross-Site Scripting attacks.