Skt Skill Bar
Monthly
Stored XSS in SKT Skill Bar WordPress plugin (all versions up to and including 2.6) permits authenticated Contributor-level attackers to persist arbitrary JavaScript into any post or page by exploiting unsanitized handling of the `chart_size` attribute in the `skillwrapper` shortcode. The attribute value is concatenated directly into an inline `<style>` block without sanitization or output escaping, enabling CSS-context breakout and script injection that executes against every subsequent visitor. No public exploit code or CISA KEV listing was identified at time of analysis, though the vulnerable code is publicly browsable in the WordPress plugin repository, lowering the barrier to exploit development.
Stored XSS in SKT Skill Bar WordPress plugin (all versions up to and including 2.6) permits authenticated Contributor-level attackers to persist arbitrary JavaScript into any post or page by exploiting unsanitized handling of the `chart_size` attribute in the `skillwrapper` shortcode. The attribute value is concatenated directly into an inline `<style>` block without sanitization or output escaping, enabling CSS-context breakout and script injection that executes against every subsequent visitor. No public exploit code or CISA KEV listing was identified at time of analysis, though the vulnerable code is publicly browsable in the WordPress plugin repository, lowering the barrier to exploit development.