A vulnerability identified as problematic has been detected in johanaarstein AM LottiePlayer Plugin up to 3.6.0 on WordPress. This vulnerability affects unknown code of the component SVG File Parser. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2025-1794. It is possible to initiate the attack remotely. There is no exploit available.