A vulnerability categorized as problematic has been discovered in Autogen Headers Menu Plugin up to 1.0.1 on WordPress. The affected element is the function
autogen_menu of the component Shortcode Handler. The manipulation of the argument head_class results in cross site scripting.
This vulnerability is identified as CVE-2025-13704. The attack can be executed remotely. There is not any exploit available.
