Trinity-Audio-CVE-Report2

Trinity-Audio-CVE-Report 2 关于 CVE-2025-9886 和 CVE-2025-9952 的披露。 CVE-2025-9886 和 CVE-2025-9952 - Trinity Audio 中的漏洞 本仓库披露了在 Trinity Audio input type="hidden" name="acti...

CVE-2025-9952

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...

WordPress Trinity Audio plugin <= 5.20.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Moose Love in WordPress Plugin Trinity Audio versions = 5.20.2...