WordPress Buckets Plugin <= 0.3.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Buckets versions = 0.3.9...

CVE-2025-57996

CVE-2025-57996 is a stored XSS vulnerability in the WordPress plugin Buckets (Buckets: 0.3.9 and earlier). The CVSS 3.1 base score is 6.5 (Medium). Attack vector: Network; Attack complexity: Low; Privileges required: Low; User interaction: Required; Scope: Changed; Impact: Confidentiality, Integr...

CVE-2025-57996 WordPress Buckets Plugin <= 0.3.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in matthewordie Buckets buckets allows Stored XSS.This issue affects Buckets: from n/a through = 0.3.9...