A vulnerability labeled as problematic has been found in Cute News Ticker Plugin up to 1.0 on WordPress. This impacts the function Color of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2025-13656. The attack can be executed remotely. There is not any exploit available.