{"id":"CVE-2026-115250","published":"2026-11-04T06:17:01.573","lastModified":"2026-11-04T06:17:01.573","description":"The Text Typing  WordPress plugin before 2.2.2 does not properly sanitize and escape a block attribute before storing it and later outputting it into a page element that is read and rendered by client-side script, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of anyone viewing the affected page.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/cd56ae71-ca5e-4335-a7e8-75c6f6936568/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}