A vulnerability classified as problematic was found in cihubconnector CI HUB Connector Plugin up to 1.2.106 on WordPress. Affected by this vulnerability is the function cihub_metadata of the component Shortcode Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-4353. It is possible to launch the attack remotely. No exploit is available.