CVE-2026-3618 | bestweblayout Columns by BestWebSoft Plugin up to 1.0.3 on WordPress Shortcode shortcode_atts ID cross site scripting

A vulnerability described as problematic has been identified in bestweblayout Columns by BestWebSoft Plugin up to 1.0.3 on WordPress. The affected element is the function shortcode_atts of the component Shortcode Handler. Executing a manipulation of the argument ID can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-3618. The attack can be launched remotely. No exploit exists.