CVE-2025-13622

Name of the Vulnerable Software and Affected Versions Jabbernotification plugin for WordPress versions up to and including 0.99-RC2

Description The Jabbernotification plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the admin.php PATH INFO. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts into pages. Successful exploitation requires tricking a user into performing an action, such as clicking a link. The vulnerable parameter is the PATH INFO within the /admin.php endpoint.

Recommendations Update the Jabbernotification plugin to a version newer than 0.99-RC2.