{"id":"CVE-2025-22622","state":"PUBLISHED","title":"Age Verification - Reflected cross-site scripting (XSS)","description":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.","publishedAt":"2025-02-19T03:51:33.892Z","updatedAt":"2025-02-19T15:08:18.689Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","source":"Fluid Attacks"},"assigner":"Fluid Attacks","products":["Age Checker Age Verification"],"affected":[{"vendor":"Age Checker","product":"Age Verification","packageName":"agecheckernet","defaultStatus":"unaffected","versions":[{"version":"1.20.0","status":"affected"}],"collectionURL":"https://wordpress.org/plugins"}],"references":["https://fluidattacks.com/advisories/skims-5/","https://wordpress.org/plugins/agecheckernet/#developers"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/22xxx/CVE-2025-22622.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-22622","state":"PUBLISHED","datePublished":"2025-02-19T03:51:33.892Z","dateUpdated":"2025-02-19T15:08:18.689Z","assignerShortName":"Fluid Attacks","assignerOrgId":"84fe0718-d6bb-4716-a7e8-81a6d1daa869","dateReserved":"2025-01-07T16:26:19.299Z"},"containers":{"cna":{"title":"Age Verification - Reflected cross-site scripting (XSS)","descriptions":[{"lang":"en","value":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php."}],"affected":[{"vendor":"Age Checker","product":"Age Verification","packageName":"agecheckernet","defaultStatus":"unaffected","versions":[{"version":"1.20.0","status":"affected"}],"collectionURL":"https://wordpress.org/plugins"}],"references":[{"url":"https://fluidattacks.com/advisories/skims-5/","tags":["third-party-advisory"]},{"url":"https://wordpress.org/plugins/agecheckernet/#developers","tags":["release-notes"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Fluid Attacks","orgId":"84fe0718-d6bb-4716-a7e8-81a6d1daa869","dateUpdated":"2025-02-19T03:51:33.892Z"},"datePublic":"2025-02-18T17:00:00.000Z","impacts":[{"capecId":"CAPEC-63","descriptions":[{"lang":"en","value":"CAPEC-63 Cross-Site Scripting (XSS)"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-19T15:08:13.975414Z","id":"CVE-2025-22622","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-19T15:08:18.689Z"}}]}}}