CVE-2025-1232

creationtimestamp| type| source ---|---|--- 2025-03-19 06:52:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8027 2025-03-19 07:57:40+00:00| seen| https://t.me/cvedetector/20623 2025-03-19 16:30:54+00:00| seen| Telegram/1nxUJd1r2Vli3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU 2025-03-19 16:48:40+00:0...

CVE-2025-1232

The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks...

CVE-2025-1232 Site Reviews < 7.2.5 - Unauthenticated Stored XSS

The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks...

CVE-2025-1232

The Site Reviews WordPress plugin (versions before 7.2.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper sanitization and escaping of certain review fields. This flaw allows unauthenticated users to execute malicious scripts in the context of site visitors, which could lead t...