The Chart Expert plugin for WordPress is vulnerable to stored Cross‑Site Scripting caused by inadequate sanitization of attributes supplied to the 'pmzez_chart' shortcode. The flaw allows an attacker who can authenticate with contributor-level access or higher to embed arbitrary script code that will execute whenever a user opens any page containing the injected shortcode. This can lead to browser‑side attacks such as phishing, session hijacking, defacement, or data exfiltration, depending on the malicious payload crafted by the attacker.

SAGortouch’s Chart Expert plugin version 1.0 and earlier are affected. The vulnerability exists in all WordPress sites that install these plugin versions and grant contributor or higher roles to users. Users who rely on this plugin for diagram or chart creation may be impacted.

The vulnerability carries a CVSS score of 6.4, indicating moderate severity. The EPSS score of less than 1% suggests that, at present, exploitation is unlikely to be widespread, and the vulnerability is not listed in the CISA KEV catalog. The attack requires authenticated access with contributor privileges, but once in place, injected scripts run automatically for all visitors to the affected page. As such, the risk is elevated for sites with many active contributors or guest authors, although the overall market-wide exploitation probability remains low.