CVE-2019-25743

Name of the Vulnerable Software and Affected Versions Soliloquy Lite version 2.5.6

Description A persistent cross-site scripting issue allows authenticated attackers to inject malicious scripts by inserting script tags into the post title field. This is achieved by submitting POST requests to the post editing endpoint using the post title parameter. The injected scripts are stored and subsequently executed when users preview the post.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.