The vulnerability resides in the Bold Timeline Lite WordPress plugin and allows a stored XSS flaw through the 'title' parameter of the 'bold_timeline_group' shortcode. Because input is not properly sanitized or escaped, an attacker who can authenticate to the site with at least Contributor privileges can inject arbitrary JavaScript that will execute in the browsers of any user who views the affected content, leading to defacement, data theft, or session hijacking.

Bold Timeline Lite plugin for WordPress versions up to and including 1.2.7. Sites that have installed this plugin and provide Contributor or higher level accounts are affected.

The CVSS score of 6.4 indicates moderate severity. With an EPSS score of less than 1% the likelihood of public exploitation is low, and the vulnerability is not listed in CISA’s KEV catalog. However, the requirement of authenticated access means that risk is confined to insiders or compromised contributor accounts; once an attacker achieves this level of access, the stored XSS can be leveraged across all visitors to the site.