CVE-2025-5534

Name of the Vulnerable Software and Affected Versions ESV Bible Shortcode plugin versions 1.0.2 and earlier

Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'esv' shortcode. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts in pages. These scripts will execute whenever a user accesses an injected page.

Recommendations For versions 1.0.2 and earlier, update to a version later than 1.0.2 to resolve the issue. As a temporary workaround, consider restricting access to the 'esv' shortcode to prevent attackers from injecting malicious scripts.