CVE-2025-1798

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-03-25

Last modified

2025-03-25

Weaknesses

CWE-352

Affected products

• Design Comuni Italia (Italia)
• Design-comuni-wordpress-theme (Unknown)

References

• https://wpscan.com/vulnerability/c5c30191-857c-419c-9096-d1fe14d34eaa/