CNNVD-202507-258 Information
CNNVD ID
CNNVD-202507-258
Related CVE
- CNNVD Published: 2025-07-03
Description (Chinese)
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress多款产品存在跨站脚本漏洞，该漏洞源于输入清理和转义不足，可能导致存储型跨站脚本攻击。
Description (English)
WordPress and WordPressplugin are products of WordPress. WordPress is a blog platform developed in the PHP language. The platform supports the installation of personal blogs on PHP and MySQL servers. WordPress plugin is an application plugin. WordPress multiple products have a cross-site script loophole, which stems from inadequate input clean-up and conversion, which may lead to storage-type cross-site script attacks.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Workif
Published
2025-07-03
Last Modified
2026-02-24
References
https://github.com/dimsemenov/Magnific-Popup/releases/tag/1.2.0 https://plugins.trac.wordpress.org/browser/bold-page-builder/trunk/content_elements_misc/js/jquery.magnific-popup.js https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/assets/front-end/js/lib-view/magnific-popup/jquery.magnific-popup.js https://plugins.trac.wordpress.org/browser/robo-gallery/trunk/js/robo_gallery.js#L56 https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/vendor/magnific-popup/magnific-popup.js https://plugins.trac.wordpress.org/changeset/3153700/essential-addons-for-elementor-lite https://plugins.trac.wordpress.org/changeset/3153781/bold-page-builder https://plugins.trac.wordpress.org/changeset/3154460/happy-elementor-addons https://plugins.trac.wordpress.org/changeset/3166204/carousel-slider https://plugins.trac.wordpress.org/changeset/3184626/addons-for-divi https://plugins.trac.wordpress.org/changeset/3201991/robo-gallery https://themes.trac.wordpress.org/changeset/244604/oceanwp https://www.elegantthemes.com/api/changelog/divi.txt https://www.elegantthemes.com/api/changelog/divi-builder.txt https://www.elegantthemes.com/api/changelog/extra.txt https://www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd?source=cve
Patch
https://wordpress.org/plugins/
Share on: