CVE-2025-48309

CVE-2025-48309 : BetPress WordPress plugin vulnerability (affected: BetPress <= 1.0.1 Lite) combining CSRF to Stored XSS. CVSSv3.1 base score 7.1 (High); vectors indicate network access, no privileges, user interaction required, scopeChanged. Impact: confidentiality, integrity, and availabilit...