CVE-2025-13311 | Just Highlight Plugin up to 1.0.3 on WordPress Setting Highlight Color cross site scripting

A vulnerability labeled as problematic has been found in Just Highlight Plugin up to 1.0.3 on WordPress. Affected by this vulnerability is an unknown functionality of the component Setting Handler. Such manipulation of the argument Highlight Color leads to cross site scripting.

This vulnerability is documented as CVE-2025-13311. The attack can be executed remotely. There is not any exploit available.