A vulnerability classified as problematic was found in Simple Business Data Plugin up to 1.0.1 on WordPress. The affected element is the function
simple_business_data of the component Shortcode Handler. The manipulation results in cross site scripting.
This vulnerability is known as CVE-2025-11870. It is possible to launch the attack remotely. No exploit is available.
