A vulnerability labeled as problematic has been found in Nari Accountant Plugin up to 1.0.12 on WordPress. This affects an unknown part of the component setting Handler. Executing manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2025-12371. It is possible to launch the attack remotely. No exploit is available.