{"affected":[{"defaultStatus":"unaffected","product":"Text Typing","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.2.2","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-115250","cwes":["CWE-79"],"description":"The Text Typing  WordPress plugin before 2.2.2 does not properly sanitize and escape a block attribute before storing it and later outputting it into a page element that is read and rendered by client-side script, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of anyone viewing the affected page.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/cd56ae71-ca5e-4335-a7e8-75c6f6936568/"}],"kev":null,"metrics":[],"modifiedAt":1793772027029,"publishedAt":1793772027029,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/cd56ae71-ca5e-4335-a7e8-75c6f6936568/"}],"remediation":[],"revision":"8154072f9c84cbd5a7fde965640e6109cd0b2d08a8bd784c9eceff06de9f6689","sources":[{"modifiedAt":1793772027029,"name":"CNA: WPScan","retrievedAt":1793776133878,"url":"https://www.cve.org/CVERecord?id=CVE-2026-115250"}],"ssvc":null,"status":"published","title":"Text Typing < 2.2.2 - Contributor+ Stored XSS","updatedAt":1793776133878}