EUVD-2026-38692
GHSA-3xqv-hqp3-38hq
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Network-delivered stored XSS requires Contributor auth (PR:L) and victim page view (UI:R); scope changes to victim browser (S:C) with limited C/I impact and no availability impact.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The AI Share & Summarize WordPress plugin before 2.0.4 does not sanitise and escape some of its shortcode attributes before outputting them in a page, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
AnalysisAI
Stored Cross-Site Scripting in the AI Share & Summarize WordPress plugin (all versions before 2.0.4) allows any user holding a Contributor role or above to inject persistent malicious JavaScript via unsanitized shortcode attributes rendered on pages. When a higher-privileged user such as an Administrator subsequently views the affected page, the payload executes in their browser, enabling session hijacking, credential theft, or unauthorized privileged actions. A publicly available proof-of-concept exploit exists per WPScan, and a vendor-released patch is available in version 2.0.4.
Technical ContextAI
WordPress shortcodes are macro-style tags embedded in post content that the plugin processes and renders as HTML at page load time. The AI Share & Summarize plugin fails to apply WordPress sanitization functions (such as esc_attr() or sanitize_text_field()) to shortcode attribute values before reflecting them into the HTML output - a textbook instance of improper output encoding leading to Stored XSS. Because the malicious payload is persisted server-side in the post content, it executes automatically for every subsequent page visitor without requiring re-delivery. The CVSS scope change (S:C) correctly reflects that the impact escapes the application context and reaches the victim's browser session. The affected product is identified via CPE as cpe:2.3:a:unknown:ai_share_&_summarize:*:*:*:*:*:*:*:*, with the vendor field listed as unknown in available data. No CWE was formally assigned, but the root cause maps directly to CWE-79 (Improper Neutralization of Input During Web Page Generation).
RemediationAI
Update the AI Share & Summarize WordPress plugin to version 2.0.4 or later, which the vendor has confirmed includes the fix for improper shortcode attribute sanitization and escaping. This is the primary and recommended remediation. Until the patch can be applied, administrators should restrict the WordPress Contributor role exclusively to fully trusted users, or temporarily deactivate the plugin entirely - deactivation fully eliminates the attack surface but removes plugin functionality. Blocking contributor-level content submission at the application layer (e.g., via role management plugins) reduces the attacker pool but does not remediate the underlying flaw. Refer to the WPScan advisory at https://wpscan.com/vulnerability/ebc956c2-42f4-495f-a37e-f83ed156af08/ and NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-10531 for additional guidance.
Share
External POC / Exploit Code
Leaving vuln.today