Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/10/01 4:23 a.m.•17 views

CVE-2025-10179

The My AskAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'myaskai' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

6.4CVSS5AI score0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/30 11:37 a.m.•10 views

CVE-2025-10179

The My AskAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'myaskai' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

6.4CVSS0.002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/30 12:00 a.m.•12 views

PT-2025-39933

Name of the Vulnerable Software and Affected Versions My AskAI plugin for WordPress versions prior to 1.0.1 Description The My AskAI plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'myaskai' shortcode. This is caused by inadequate input sanitization and output...

6.4CVSS5.4AI score0.002EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/30 12:00 a.m.•1 views

CVE-2025-10179: Improper Neutralization of Input During Web Page Generation

The My AskAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'myaskai' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

6.4CVSS6AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder