CVE-2025-0692

Published Feb 13, 2025

Last updated 3 days ago

CVSS low 3.5

Overview

Description
The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Source
contact@wpscan.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
3.5
Impact score
2.5
Exploitability score
0.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Severity
LOW

Social media

Hype score
Not currently trending

  1. CVE-2025-0692 Stored XSS in Simple Video Management System WordPress Plu... https://t.co/O5n9GiiNo8 Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd

    @VulmonFeeds

    13 Feb 2025

    8 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References