CVE-2026-1279 | Employee Directory Plugin up to 1.2.1 on WordPress Shortcode form_title cross site scripting

A vulnerability was found in Employee Directory Plugin up to 1.2.1 on WordPress and classified as problematic. This impacts an unknown function of the component Shortcode Handler. The manipulation of the argument form_title results in cross site scripting.

This vulnerability was named CVE-2026-1279. The attack may be performed from remote. There is no available exploit.