CVE-2025-12379 | Shortcodes and Extra Features for Phlox Theme Plugin Modern Heading Widget cross site scripting

A vulnerability categorized as problematic has been discovered in Shortcodes and Extra Features for Phlox Theme Plugin up to 2.17.13 on WordPress. This issue affects some unknown processing of the component Modern Heading Widget. Executing a manipulation of the argument tag/title_tag can lead to cross site scripting.

This vulnerability is tracked as CVE-2025-12379. The attack can be launched remotely. No exploit exists.