CVE-2025-5730 - CERT CVE
ID CVE-2025-5730
Sažetak The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.
Reference
CVSS
Base: 4.3
Impact: 3.4
Exploitability:0.9
Pristup
VektorSloženostAutentikacija
NETWORK LOW HIGH
Impact
PovjerljivostCjelovitostDostupnost
LOW LOW LOW
CVSS vektor CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Zadnje važnije ažuriranje 30-06-2025 - 19:15
Objavljeno 30-06-2025 - 06:15