{"id":"CVE-2026-110524","published":"2026-10-28T06:16:33.870","lastModified":"2026-10-28T06:16:33.870","description":"The Copy Anything to Clipboard for WordPress  WordPress plugin before 5.5.5 does not sanitize and escape a shortcode attribute before storing it and writing it back into the page through a client-side script, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks against higher-privileged users who view and interact with the content.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/4ee29b7c-ae80-4875-bd78-7128ff4e5e1c/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}