A vulnerability described as problematic has been identified in CSSIgniter Shortcodes Plugin up to 2.4.1 on WordPress. Affected is an unknown function of the component Shortcode Handler. The manipulation of the argument element results in cross site scripting.
This vulnerability is known as CVE-2025-13448. It is possible to launch the attack remotely. No exploit is available.