Wordpress Alert: Stored cross-site scripting in shortcodes

Untrusted shortcode attributes become executable HTML or JavaScript. A page view can run attacker-controlled script.

https://switchboardtechservices.com/guides/wordpress-alert-stored-cross-site-scripting-in-shortcodes/

By Switchboard Tech Services · Originally published 2026-08-03

#Switchboard #Guide