Miembros de
Boletines de Vulnerabilidades |
CVE-2025-58674 |
|
| Software afectado | WORDPRESS |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress allows Stored XSS. WordPress core security team is aware of the issue and working on a fix. This is low severity vulnerability that requires an attacker to have Author or higher user privileges to execute the attack vector. This issue affects WordPress: from n/a through 6.8.2. |
|
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-58674 | |
