CVE-2025-8282
CVE-2025-8282
Low · published September 23, 2025
What it is
The SureForms WordPress plugin before 1.9.1 does not sanitise and escape some parameters when outputing them in the page, which could allow admin and above users to perform Cross-Site Scripting attacks.
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00193 · 8.5th percentile
- Published
- 2025-09-23T10:15Z
References (1)
EPSS history
Timeline