CVE-2025-10179

Name of the Vulnerable Software and Affected Versions My AskAI plugin for WordPress versions prior to 1.0.1

Description The My AskAI plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'myaskai' shortcode. This is caused by inadequate input sanitization and output escaping of user-supplied attributes. Authenticated attackers with contributor-level access or higher can inject malicious web scripts into pages. These scripts will then execute when a user accesses the compromised page.

Recommendations Update the My AskAI plugin to version 1.0.1 or later.