CVE-2025-10166 | tw2113 Social Media Shortcodes Plugin up to 1.3.1 on WordPress Shortcode cross site scripting

A vulnerability was found in tw2113 Social Media Shortcodes Plugin up to 1.3.1 on WordPress. It has been classified as problematic. This issue affects the function Media of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2025-10166. The attack can be initiated remotely. There is not any exploit available.