CVE-2025-9541

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Score

CVSS 3.1 4.7 Medium

Status

Deferred - contact@wpscan.com

Published

2025-09-22

Last modified

2025-09-22

Affected products

• Markup Markdown (Unknown)

References

• https://wpscan.com/vulnerability/3828b320-9f7b-4a2a-a6b0-200b023d602c/