CVE-2025-15669

4.8 Moyenne

Publiée le 01/08/2026 à 09:16 · Modifiée le 29/09/2026 à 16:10 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Bit Form WordPress plugin before 3.1.4 does not sanitise one of its conversational-form display settings before rendering it on the public-facing form, allowing high-privilege users (such as administrators, who do not hold the unfiltered_html capability on multisite) to store JavaScript that executes in the browser of any visitor who views the form.

Traduire en français

Produits concernés

Unknown Bit Form

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.8 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://wpscan.com/vulnerability/69800fa9-4fbd-489c-8759-96df745d77d6/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories