CVE-2026-4859 | softpulseinfotech SP Blog Designer Plugin up to 1.0.0 on WordPress Shortcode wpsbd_post_carousel design cross site scripting

A vulnerability labeled as problematic has been found in softpulseinfotech SP Blog Designer Plugin up to 1.0.0 on WordPress. Affected by this issue is the function wpsbd_post_carousel of the component Shortcode Handler. The manipulation of the argument design results in cross site scripting.

This vulnerability is identified as CVE-2026-4859. The attack can be executed remotely. There is not any exploit available.