Lucene search
K

8 matches found

CNVD
CNVD
added 2025/11/14 12:0 a.m.2 views

WordPress Plugin Chart Expert Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Chart Expert, which stems...

6.4CVSS6AI score0.00189EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/12 3:47 a.m.12 views

CVE-2025-12753

The Chart Expert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmzezchart' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes. This makes it possible for...

6.4CVSS5AI score0.00189EPSS
Exploits0References1
NVD
NVD
added 2025/11/11 4:15 a.m.4 views

CVE-2025-12753

The Chart Expert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmzezchart' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes. This makes it possible for...

6.4CVSS0.00189EPSS
Exploits0References3
CVE
CVE
added 2025/11/11 3:30 a.m.19 views

CVE-2025-12753

The WordPress Chart Expert plugin (versions

6.4CVSS4.7AI score0.00189EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/11 3:30 a.m.2 views

CVE-2025-12753 Chart Expert <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Chart Expert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmzezchart' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes. This makes it possible for...

6.4CVSS4.7AI score0.00189EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/11 3:30 a.m.4 views

CVE-2025-12753 Chart Expert <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Chart Expert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmzezchart' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes. This makes it possible for...

6.4CVSS0.00189EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/11 12:26 a.m.4 views

WordPress Chart Expert plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Chart Expert versions = 1.0...

6.4CVSS5.8AI score0.00189EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.4 views

WordPress plugin Chart Expert 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Chart Expert, which stems...

6.4CVSS5.7AI score0.00189EPSS
Exploits0References3
Rows per page
Query Builder