CVE-2025-58812mediumCWE-79

CVE-2025-58812: falha de média gravidade em PriceListo Best Restaurant Menu by PriceListo

WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Best Restaurant Menu by PriceListo

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.2%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PriceListo Best Restaurant Menu by PriceListo best-restaurant-menu-by-pricelisto allows Stored XSS.This issue affects Best Restaurant Menu by PriceListo: from n/a through <= 1.4.3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
PriceListo · Best Restaurant Menu by PriceListo
CVEs relacionadas — PriceListo Best Restaurant Menu by PriceListo

No mesmo produto, das mais perigosas para as menos.

CVE-2024-38793HIGHWordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerabilityEPSS 1.2%CVE-2024-49698MEDIUMWordPress Great Restaurant Menu WP plugin <= 1.4.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-47649MEDIUMWordPress Best Restaurant Menu by PriceListo Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%