PT-2025-31473 · WordPress · Customer Reviews For Woocommerce

D.Sim

·

CVE-2025-5720

·

Publicado

2025-07-31

·

Atualizado

2025-07-31

CVSS v3.1

6.4

Média

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Customer Reviews for WooCommerce plugin for WordPress versions prior to 5.80.3
Description The Customer Reviews for WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through the author parameter. Insufficient input sanitization and output escaping allows unauthenticated attackers to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page.
Recommendations Update the Customer Reviews for WooCommerce plugin to version 5.80.3 or later.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-5720

Produtos afetados

Customer Reviews For Woocommerce