Threats tagged 'ghsa-hvvw-vfw3-rmrq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2025-11922The Inactive Logout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Medium6.42025-11-01GCVE DatabaseCVE-2025-11922 The Inactive Logout plugin for WordPress up to version 3.5.5 contains a stored cross-site scripting (XSS) vulnerability via the 'ina_redirect_page_individual_user' parameter. Authenticated users with subscriber-level access or higher can inject malicious scripts that execute when other users visit the affected pages. Report on CVE-2025-11922 Vulnerability CWE-79 #ghsa-hvvw-vfw3-rmrq	GCVE Database	2025-11-01

Page 1 of 1