Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-1232

Site Reviews < 7.2.5 - Unauthenticated Stored XSS

Description

The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Site Reviews

Default version status: unaffected

  • 0 to < 7.2.5affected

References