Threats tagged 'ghsa-4hfm-xmwc-7ffw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	3.5	CVE-2025-10636The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which Low3.52025-10-30GCVE DatabaseCVE-2025-10636 The NS Maintenance Mode for WP WordPress plugin versions through 1.3.1 has a vulnerability where some settings are not properly sanitized and escaped. This flaw allows high privilege users, such as administrators, to perform stored Cross-Site Scripting (XSS) attacks even if the unfiltered_html capability is disabled, such as in multisite WordPress setups. Report on CVE-2025-10636 Vulnerability #ghsa-4hfm-xmwc-7ffw	GCVE Database	2025-10-30

Page 1 of 1