CVE-2025-10567: CVE-2025-10567: güvenlik açığı

Açıklama (NVD)

The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct reflected XSS attacks against logged-in users.

Özet bilgiler

CVSS v3.1

6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS

%0,19 (yüzdelik 8)

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wpscan.com