Threats tagged 'ghsa-c568-v783-w2v7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2025-12135The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css_code' parameter in all High7.22025-11-21GCVE DatabaseCVE-2025-12135 The WPBookit WordPress plugin versions up to and including 1.0.6 contain a stored cross-site scripting (XSS) vulnerability via the 'css_code' parameter. This vulnerability arises from a missing capability check in the save_custome_code() function, allowing unauthenticated attackers to inject malicious scripts that execute when users access the affected pages. Report on CVE-2025-12135 Vulnerability CWE-79 #ghsa-c568-v783-w2v7	GCVE Database	2025-11-21

Page 1 of 1