📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Government HIGH 43m Global vulnerability Enterprise Software / ERP Systems CRITICAL 1h Global phishing Cross-sector HIGH 6h Global data_breach Energy CRITICAL 8h Global phishing Government/Multi-sector HIGH 9h Global apt Education CRITICAL 11h Global vulnerability Enterprise Software / ERP Systems CRITICAL 12h Global vulnerability IT Infrastructure CRITICAL 13h Global vulnerability Technology and Software Development HIGH 14h Global vulnerability Enterprise IT and Government CRITICAL 14h Global data_breach Government HIGH 43m Global vulnerability Enterprise Software / ERP Systems CRITICAL 1h Global phishing Cross-sector HIGH 6h Global data_breach Energy CRITICAL 8h Global phishing Government/Multi-sector HIGH 9h Global apt Education CRITICAL 11h Global vulnerability Enterprise Software / ERP Systems CRITICAL 12h Global vulnerability IT Infrastructure CRITICAL 13h Global vulnerability Technology and Software Development HIGH 14h Global vulnerability Enterprise IT and Government CRITICAL 14h Global data_breach Government HIGH 43m Global vulnerability Enterprise Software / ERP Systems CRITICAL 1h Global phishing Cross-sector HIGH 6h Global data_breach Energy CRITICAL 8h Global phishing Government/Multi-sector HIGH 9h Global apt Education CRITICAL 11h Global vulnerability Enterprise Software / ERP Systems CRITICAL 12h Global vulnerability IT Infrastructure CRITICAL 13h Global vulnerability Technology and Software Development HIGH 14h Global vulnerability Enterprise IT and Government CRITICAL 14h
Vulnerabilities

CVE-2026-3997

Medium
The Text Toggle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute of the [tt_part] and [tt] shortcodes in all versions up to and including 1.1. This
CWE-79 — Weakness Type
Published: Mar 21, 2026  ·  Modified: Mar 23, 2026  ·  Source: NVD
CVSS v3
6.4
🔗 NVD Official
📄 Description (English)

The Text Toggle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute of the [tt_part] and [tt] shortcodes in all versions up to and including 1.1. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Specifically, in the avp_texttoggle_part_shortcode() function, the 'title' attribute is extracted from shortcode attributes and concatenated directly into HTML output without any escaping — both within an HTML attribute context (title="...") on line 116 and in HTML content on line 119. While the 'class' attribute is properly validated using ctype_alnum(), the 'title' attribute has no sanitization whatsoever. An attacker can inject double-quote characters to break out of the title attribute and inject arbitrary HTML attributes including event handlers. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

🤖 AI Executive Summary

The Text Toggle WordPress plugin versions up to 1.1 contains a Stored Cross-Site Scripting vulnerability in the 'title' shortcode attribute due to insufficient input sanitization and output escaping. Authenticated attackers can inject malicious HTML and JavaScript code that persists in the database and executes for all users viewing affected pages.

📄 Description (Arabic)

تحتوي إضافة Text Toggle لـ WordPress على ثغرة Stored XSS في سمة العنوان للاختصارات [tt_part] و [tt] بسبب عدم تنظيف المدخلات بشكل كافٍ. يمكن للمهاجمين المصرحين بالدخول حقن أكواد HTML و JavaScript ضارة تبقى في قاعدة البيانات وتنفذ لجميع المستخدمين.

🤖 ملخص تنفيذي (AI)

The Text Toggle WordPress plugin versions up to 1.1 contains a Stored Cross-Site Scripting vulnerability in the 'title' shortcode attribute due to insufficient input sanitization and output escaping. Authenticated attackers can inject malicious HTML and JavaScript code that persists in the database and executes for all users viewing affected pages.

🤖 AI Intelligence Analysis Analyzed: May 15, 2026 22:39
🇸🇦 Saudi Arabia Impact Assessment
Saudi Relevance: high
🏢 Affected Saudi Sectors
government banking healthcare telecom
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
7.0
/ 10.0
🔧 Remediation Steps (English)
Update the Text Toggle plugin to version 1.2 or later immediately. Implement input sanitization using sanitize_text_field() or wp_kses_post() for the 'title' attribute and apply proper output escaping using esc_attr() for HTML attributes and esc_html() for content. Disable the plugin if an update is unavailable and audit all posts and pages for malicious shortcode content.
🔧 خطوات المعالجة (العربية)
قم بتحديث إضافة Text Toggle إلى الإصدار 1.2 أو أحدث فوراً. طبق تنظيف المدخلات باستخدام sanitize_text_field() أو wp_kses_post() لسمة 'title' وطبق الهروب الصحيح للمخرجات باستخدام esc_attr() للسمات و esc_html() للمحتوى. عطل الإضافة إذا لم يكن التحديث متاحاً وتدقق في جميع المنشورات والصفحات عن محتوى shortcode ضار.
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
A.7.1.1 A.7.1.2 A.12.2.1
🔵 SAMA CSF
ID.BE-1 PR.DS-1 PR.DS-2
🟡 ISO 27001:2022
A.14.2.1 A.14.2.5
📊 CVSS Score
6.4
/ 10.0 — Medium
📊 CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack VectorN — None / Network
Attack ComplexityL — Low / Local
Privileges RequiredL — Low / Local
User InteractionN — None / Network
ScopeC — Changed
ConfidentialityL — Low / Local
IntegrityL — Low / Local
AvailabilityN — None / Network
📋 Quick Facts
Severity Medium
CVSS Score6.4
CWECWE-79
Exploit No
Patch ✗ No
Published 2026-03-21
Source Feed nvd
Views 4
🇸🇦 Saudi Risk Score
7.0
/ 10.0 — Saudi Risk
Priority: HIGH
🏷️ Tags
CWE-79
Share this CVE
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.