Threats tagged 'ghsa-q5f6-m5mq-h3cm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2025-11801The AudioTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' shortcode attribute Medium6.42025-11-21GCVE DatabaseCVE-2025-11801 The AudioTube WordPress plugin versions up to and including 0.0.3 contain a stored cross-site scripting (XSS) vulnerability via the 'caption' shortcode attribute. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. Report on CVE-2025-11801 Vulnerability CWE-79 #ghsa-q5f6-m5mq-h3cm	GCVE Database	2025-11-21

Page 1 of 1