PT-2025-1931 · WordPress · Bulk Me Now!
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Bulk Me Now! WordPress plugin through 2.0
Description
The issue is related to the plugin not validating and escaping some of its shortcode attributes before outputting them back in a page or post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Recommendations
Bulk Me Now! WordPress plugin through 2.0: Update the plugin to a version that properly validates and escapes shortcode attributes to prevent Stored Cross-Site Scripting attacks.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bulk Me Now!