CVE-2026-83544 — Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute

CVE-2026-83544

Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute PUBLISHED

Description (CNA)

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.

Affected (CNA)

Vendor / product	Versions
Unknown / Greenshift	affected 0 before 13.2.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/f2bd202b-43fc-4ca7-9bab-649ed87e7cbd/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.