CVE-2025-12823

Name of the Vulnerable Software and Affected Versions CSV to SortTable plugin for WordPress versions prior to 4.3

Description The software is susceptible to Stored Cross-Site Scripting through the 'csv' shortcode due to inadequate input sanitization and output escaping of user-provided attributes. This allows authenticated attackers with Contributor-level access or higher to inject malicious web scripts into pages. When a user accesses an affected page, the injected scripts will execute.

Recommendations Update the CSV to SortTable plugin to version 4.3 or later.