PT-2025-50306

CVE-2025-13073

·

Published

2025-11-19

·

Updated

2025-12-15

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions HandL UTM Grabber / Tracker WordPress plugin versions prior to 2.8.1
Description The HandL UTM Grabber / Tracker WordPress plugin does not properly sanitize and escape a parameter before displaying it, resulting in a Reflected Cross-Site Scripting issue. This could potentially be exploited against users with high privileges, such as administrators.
Recommendations Update the HandL UTM Grabber / Tracker WordPress plugin to version 2.8.1 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2025-13073
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com