A vulnerability marked as problematic has been reported in duongancol Woostify Plugin up to 2.5.0 on WordPress. The affected element is an unknown function of the file Lity.js. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-4805. The attack is possible to be carried out remotely. No exploit exists.