PT-2025-3705 · WordPress · Wordpress Auction Plugin
CVSS v3.1
4.8
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
WordPress Auction Plugin versions 3.7 and earlier
Description
The issue allows high privilege users, such as editors, to perform Stored Cross-Site Scripting attacks due to the plugin not sanitizing and escaping some of its settings.
Recommendations
For WordPress Auction Plugin versions 3.7 and earlier, update to a version that addresses the issue of sanitizing and escaping settings to prevent Stored Cross-Site Scripting attacks.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wordpress Auction Plugin