PT-2025-39527 · WordPress · Authorsy

·

CVE-2025-27006

·

Publicado

2025-09-26

·

Atualizado

2025-09-26

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions themeplugs Authorsy versions through 1.0.5
Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages and executed by other users. The issue impacts the Authorsy theme.
Recommendations Update themeplugs Authorsy to a version later than 1.0.5.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-27006

Produtos afetados

Authorsy