Orta CVSS 6.1
CVE-2025-13622: CVE-2025-13622: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Özet bilgiler
- CVSS v3.1
- 6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS
- %0,28 (yüzdelik 20)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor