Aller au contenu
Se connecter
6.8 Moyenne

CVE-2025-15690 The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post…

Description

The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewing the affected page. The Content Mask WordPress plugin before 1.8.5.6's option to restrict its use by role does not prevent this.

Produits et versions touchés

Produit Versions touchées Corrigé en
Content Mask 1.7 1.7.1 → < 1.8.5.6 1.8.5.6

Autres CVE de Content Mask

Les 3 CVE de Content Mask →
CVE-2026-77003 The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being… 2.7 Faible CVE-2022-1203 The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as… Non notée
Suivre cette CVE