CVE-2026-10531 — AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute

CVE-2026-10531

AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute PUBLISHED

Description (CNA)

The AI Share & Summarize WordPress plugin before 2.0.4 does not sanitise and escape some of its shortcode attributes before outputting them in a page, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / AI Share & Summarize	affected 0 before 2.0.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/ebc956c2-42f4-495f-a37e-f83ed156af08/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.