bootstrap-shortcodes vulnerabilities

CVEs whose affected-version data names the bootstrap-shortcodes package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112111Medium· 5.1

2d ago

The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode

The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emits the id attribute value into an unquo…

▾ SunlitBootstrap Shortcodes project · bootstrap-shortcodesEPSS 0.30%via CVEORG