CVE-2025-47685

CVE-2025-47685 affects the WordPress plugin Contribuinte Checkout (versions up to and including 2.0.02). It combines CSRF to enable Stored XSS in the plugin. The CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, requiring user interaction, and impacts to confidentiality, integrity, a...