4.8Mittel

CVE-2025-6236Hostel < 1.1.5.9 - Admin+ Stored XSS

Hostel Veröffentlicht: 2025-07-10 09:00 (vor 1 Jahr)

Beschreibung

The Hostel WordPress plugin before 1.1.5.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Schwachstellentyp (CWE): CWE-79

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
kibokolabs	hostel	< 1.1.5.9
—	Hostel	< 1.1.5.9

Referenzen und Patches

https://wpscan.com/vulnerability/ff4d312b-a4d1-40cd-a555-a0a1b46f9959/ exploitvdb-entrytechnical-descriptionExploit

CPE-Treffer (NVD) (1)

cpe:2.3:a:kibokolabs:hostel:*:*:*:*:*:wordpress:*:* < 1.1.5.9

CVSS-Score

4.8Mittel

Quelle: CISA-ADP · CVSS 3.1

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Hoch
Benutzerinteraktion: Erforderlich
Geltungsbereich: Geändert
Vertraulichkeit: Niedrig
Integrität: Niedrig
Verfügbarkeit: Keine

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Alle Scores (2)

CISA-ADP	CVSS 3.1	4.8Mittel
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	4.8Mittel

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

0.25%

höher als 16 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: poc
Automatisierbar: no
Technische Auswirkung: partial

Zeitverlauf

ID reserviert2025-06-18
Veröffentlicht2025-07-10 09:00
Bei IP-DB eingegangen2026-10-24 23:59
Zuletzt aktualisiert2026-06-17 13:01

Vergeben von (CNA): WPScan
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — WordPress plugins & themes

6.4Mittel

CVE-2026-18742 vor 1 Stunde

Flatsome <= 3.20.12 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-text-sec', 'data-title', and 'title' Attributes via Custom HTML Block

UX-themes Flatsome

The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-text-sec', 'data-title', and 'title' Attributes via Custom HTML Block in all versions up to, and including, 3.20.12 due to insufficient input sanitization and output escap…

Ohne Score

CVE-2026-126639 vor 4 Stunden

WP Ultimate CSV Importer (Free & Pro) - Unauthenticated Post Data Disclosure via Predictable Single Export Path

WP Ultimate CSV Importer; WP Ultimate CSV Importer Pro

The WP Ultimate CSV Importer WordPress plugin before 9.2, WP Ultimate CSV Importer Pro WordPress plugin before 9.0.7 do not protect the files created by their single post export feature, writing them to a publicly accessible location under a predictable name…

Ohne Score

CVE-2026-126640 vor 4 Stunden

WP Ultimate CSV Importer < 9.3 - Admin+ SQLi via LifterLMS Import

WP Ultimate CSV Importer

The WP Ultimate CSV Importer WordPress plugin before 9.3 does not escape values from imported files before using them in SQL queries when importing LifterLMS content, allowing high privilege users such as admin, including the administrator of a single site o…

Ohne Score

CVE-2026-126697 vor 4 Stunden

Quick Page/Post Redirect 5.2.1 - 5.2.3 - Backdoor via Off-Repository Update Channel

Quick Page/Post Redirect Plugin

The Quick Page/Post Redirect Plugin WordPress plugin before 5.2.4 was distributed with a hidden update mechanism that fetched Quick Page/Post Redirect Plugin WordPress plugin before 5.2.4 updates from its author's own server instead of WordPress.org, which wa…

Ohne Score

CVE-2026-118182 vor 4 Stunden

Copy & Delete Posts < 1.5.8 - Authenticated Arbitrary Post Slug Takeover

Duplicate Post

The Duplicate Post WordPress plugin before 1.5.8 does not check that a user duplicating a post is allowed to edit it, which, when the slug takeover option is enabled, allows users of a role an administrator has given Duplicate Post WordPress plugin before 1.5…

Ohne Score

CVE-2026-118183 vor 4 Stunden

Copy & Delete Posts < 1.5.8 - Authenticated Post Publishing Restriction Bypass

Duplicate Post

The Duplicate Post WordPress plugin before 1.5.8 does not check whether a user may publish posts when duplicating one, allowing users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributors, to create …