Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2025/10/05 2:51 a.m.14 views

CVE-2025-9030

The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforelabel' and 'afterlabel' parameters in versions less than, or equal to, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS5.2AI score0.0018EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/04 2:24 a.m.3 views

CVE-2025-9030 Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforelabel' and 'afterlabel' parameters in versions less than, or equal to, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS4.9AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/04 12:0 a.m.11 views

PT-2025-40619

Name of the Vulnerable Software and Affected Versions Majestic Before After Image plugin for WordPress versions prior to 2.0.2 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows authenticated attackers with...

5.4CVSS5.5AI score0.0018EPSS
SaveExploits0References5
Rows per page
Query Builder