CVE-2025-0688
15.05.2025, 20:16
The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users.
| Vendor | Product | Version |
|---|---|---|
| mynamedia | spiritual_gifts_survey_\(and_optional_s.h.a.p.e_survey\) | 𝑥 ≤ 0.9.10 |
𝑥
= Vulnerable software versions