CVE-2025-49423
BaseFortify
Publication date: 2025-06-27
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a reflected Cross Site Scripting (XSS) issue in the WordPress Bulk YouTube Post Creator plugin version 1.0 and earlier. It allows unauthenticated attackers to inject malicious scripts, such as redirects, advertisements, or other HTML payloads, into websites using the plugin. These scripts execute when visitors access the compromised site, potentially leading to unauthorized actions or content manipulation. [1]
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to execute malicious scripts on your website visitors' browsers. This can lead to unauthorized actions, content manipulation, redirecting users to malicious sites, or displaying unwanted advertisements. It poses a moderate risk with a CVSS score of 7.1 and can compromise the integrity and trustworthiness of your website. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves monitoring for reflected XSS attack patterns targeting the Bulk YouTube Post Creator plugin, such as suspicious URL parameters containing script tags or payloads. Specific commands are not provided in the resources, but generally, you can use web server logs analysis tools or intrusion detection systems to look for unusual query strings or payloads in HTTP requests that include script injections. [1]
What immediate steps should I take to mitigate this vulnerability?
Apply the Patchstack virtual patch (vPatch) immediately, which automatically blocks attack attempts exploiting this vulnerability until an official fix is released. Additionally, consult your hosting provider or professional incident response services if your site has already been compromised. [1]