Reflected XSS Vulnerability in Arconix Shortcodes by Tychesoftwares

CVE-2025-47673

What is CVE-2025-47673?

A reflected XSS vulnerability exists in the Arconix Shortcodes plugin developed by Tychesoftwares. This flaw allows attackers to inject malicious scripts, which can be executed in the context of a user's browser. Users visiting affected versions of the plugin, from n/a through 2.1.16, may unintentionally execute harmful scripts, leading to potential data theft and session hijacking. It is crucial for website administrators to promptly update to the latest version to mitigate the risk of exploitation.

References