A vulnerability identified as problematic has been detected in bjornjohansen BJ Lazy Load Plugin up to 1.0.9 on WordPress. Affected by this vulnerability is the function filter_images. The manipulation of the argument Class leads to cross site scripting.

This vulnerability is referenced as CVE-2026-2300. Remote exploitation of the attack is possible. No exploit is available.