This vulnerability arises because the BetterDocs WordPress plugin does not sanitize an AI‑generated documentation summary before storing and rendering it. The lack of sanitization allows an attacker to inject a malicious payload into the summary, which is then saved to the database. When any visitor, including site administrators, views the affected page, the stored payload is output directly and executes in the visitor’s browser, leading to client‑side code execution. The impact includes potential compromise of user sessions, defacement of site content, and the capacity for an attacker to run arbitrary scripts from the client side.

WordPress installations that use the BetterDocs plugin with a version earlier than 4.5.5 are affected. The vulnerability is tied to the AI Doc Summarizer feature, which is accessible to unauthenticated users and is active in all affected plugin releases before the 4.5.5 update.

The CVSS score of 6.1 indicates moderate severity, and the EPSS score of less than 1% suggests a very low current exploitation probability. It is not listed in CISA’s KEV catalog. The likely attack vector is web‑based and requires no authentication; any attacker can submit a malicious AI prompt to store the payload. Exploitation succeeds when an end‑user or administrator visits the page that displays the vulnerable summary, triggering script execution in the victim’s browser.