CVE-2025-11821 | Products By Custom Tax Plugin up to 2.2 on WordPress Shortcode woo_products_custom_tax cross site scripting

A vulnerability has been found in Products By Custom Tax Plugin up to 2.2 on WordPress and classified as problematic. This vulnerability affects the function woo_products_custom_tax of the component Shortcode Handler. Performing manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2025-11821. It is possible to initiate the attack remotely. There is no exploit available.