CVE-2025-1523

CVE-2025-1523 concerns The Ultimate Dashboard WordPress plugin prior to 3.8.6. The vulnerability is a stored XSS in plugin settings caused by insufficient sanitization/escaping, which could allow a high-privilege user (e.g., an admin) to inject script payloads. Exploitation details (e.g., exact v...

CVE-2025-1525

CVE-2025-1525 affects the WordPress plugin Ultimate Dashboard (before 3.8.6). Multiple connected sources confirm that insufficient sanitization/escaping of plugin settings enables Stored XSS by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (e.g., multisite). The pat...

CVE-2025-1524

CVE-2025-1524 affects the Ultimate Dashboard WordPress plugin (versions before 3.8.6). The issue arises from insufficient sanitization and escaping of certain settings, enabling stored XSS by high-privilege users (e.g., admins), including in multisite environments where unfiltered_html is disallo...