CVE-2025-8392

creationtimestamp| type| source ---|---|--- 2025-09-11 07:37:08+00:00| seen| Telegram/LejwaGUR9FoOs-9XjF4SFLWVo5G8T7bQS3ToGnX81GRw...

CVE-2025-8392 Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter

The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

WordPress Mitfahrgelegenheit plugin <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via date Parameter vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Mitfahrgelegenheit versions = 1.1.5...