Threats tagged 'ghsa-8jg3-f28x-33h3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.2%	CVE-2025-10567The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its Medium6.3EPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-10567 The FunnelKit WordPress plugin versions prior to 3.12.0.1 contain a reflected cross-site scripting (XSS) vulnerability. This occurs because the plugin does not properly sanitize user input before echoing it back in certain checkout-related AJAX actions. The vulnerability allows attackers to execute reflected XSS attacks against logged-in users. EPSS 0.2%Report on CVE-2025-10567 Vulnerability #ghsa-8jg3-f28x-33h3	GCVE Database	2025-11-05

Page 1 of 1