Bootstrap Shortcodes project Bootstrap Shortcodes
- CVE-2026-112111 The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emits 0.4%