Threats tagged 'ghsa-f87p-wjm9-4rp5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2025-12904The SNORDIAN's H5PxAPIkatchu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'insert_data' High7.22025-11-14GCVE DatabaseCVE-2025-12904 The SNORDIAN's H5PxAPIkatchu WordPress plugin versions up to and including 0.4.17 contain a stored cross-site scripting (XSS) vulnerability in the 'insert_data' AJAX endpoint. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The vulnerability has a high severity rating with a CVSS score of 7.2. Report on CVE-2025-12904 Vulnerability CWE-79 #ghsa-f87p-wjm9-4rp5	GCVE Database	2025-11-14

Page 1 of 1