CVE-2025-1232

The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks...

PT-2021-16118

Name of the Vulnerable Software and Affected Versions Site Reviews WordPress plugin versions prior to 5.13.1 Description The issue allows administrators to perform Cross-Site Scripting attacks when the unfiltered html is disallowed, due to the plugin not sanitizing some of its Review Details when...