A vulnerability classified as problematic has been found in Passster Plugin up to 4.2.21/4.2.24 on WordPress. This vulnerability affects the function content_protector of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2025-14865. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.