A vulnerability, which was classified as problematic, was found in Citations tools Plugin up to 0.3.2 on WordPress. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. Executing a manipulation of the argument code can lead to cross site scripting.
This vulnerability appears as CVE-2026-1912. The attack may be performed from remote. There is no available exploit.