A vulnerability was found in Qzzr Shortcode Plugin up to 1.0.1 on WordPress. It has been classified as problematic. This issue affects the function
qzzr of the component Shortcode Handler. The manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-11806. The attack is possible to be carried out remotely. No exploit exists.
