Typing Text Give Your Texts Many Typing Effects
Monthly
Stored cross-site scripting in the bPlugins 'Typing Text - Give your texts many typing effects' WordPress plugin affects every release through 2.2.0, allowing an authenticated user with contributor- or author-level privileges to persist malicious markup that executes in another user's browser when the injected content is rendered. The assessed vector (CVSS 6.5, AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) reflects that the attacker needs an existing account on the target site and that a second user must view the affected page before the payload fires, which limits the flaw to actors who already hold a foothold on the installation rather than remote unauthenticated intruders. No public exploit code or CISA KEV entry is associated with this issue at time of analysis, and the EPSS-style priority assigned by vuln.today places it in the current-month remediation queue rather than the emergency tier.
Stored cross-site scripting in the bPlugins 'Typing Text - Give your texts many typing effects' WordPress plugin affects every release through 2.2.0, allowing an authenticated user with contributor- or author-level privileges to persist malicious markup that executes in another user's browser when the injected content is rendered. The assessed vector (CVSS 6.5, AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) reflects that the attacker needs an existing account on the target site and that a second user must view the affected page before the payload fires, which limits the flaw to actors who already hold a foothold on the installation rather than remote unauthenticated intruders. No public exploit code or CISA KEV entry is associated with this issue at time of analysis, and the EPSS-style priority assigned by vuln.today places it in the current-month remediation queue rather than the emergency tier.