CVE-2025-5842

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19585 2025-06-26 12:29:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj4vfjqey2i...

CVE-2025-5842 Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter

The Modern Design Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-5842 Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter

The Modern Design Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

WordPress Modern Design Library plugin <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via class Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Modern Design Library versions = 1.1.4...