The Website LLMs.txt plugin contains a stored cross‑site scripting flaw in its admin configuration options. Because input is not properly sanitized and the output is not escaped, an attacker who can authenticate with administrator‑level permissions can inject arbitrary JavaScript into pages that will run whenever other users access those pages. The injected script can steal session cookies, deface content, or redirect users, thereby compromising confidentiality, integrity, and potentially availability of the site’s front end.

WordPress sites that use the Website LLMs.txt plugin version 8.2.6 or earlier. The vulnerability only applies to multi‑site installations, and to installations where the unfiltered_html capability has been disabled for the administrator role. Users with administrator or higher privileges can trigger the exploit.

The CVSS score of 4.4 indicates a medium severity risk, but the EPSS score of less than 1% demonstrates that exploitation is currently unlikely. The flaw is not listed in the CISA KEV catalog. The attack requires authenticated access to the plugin’s admin interface, meaning that an attacker must first compromise or be granted administrator credentials. Once an article or page is stored with malicious script, all subsequent visits to that page by any user will execute the script, providing a persistent but localized attack vector.