CVE-2025-13893
BaseFortify
Publication date: 2026-01-09
Last updated on: 2026-01-09
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| unknown_vendor | lesson_plan_book | to 1.3 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Reflected Cross-Site Scripting (XSS) issue in the Lesson Plan Book WordPress plugin (up to version 1.3). It occurs because the plugin uses the $_SERVER['PHP_SELF'] variable without properly sanitizing or escaping it. This allows unauthenticated attackers to inject malicious scripts into web pages, which execute when a user is tricked into clicking a crafted link. [2]
How can this vulnerability impact me? :
The vulnerability can allow attackers to execute arbitrary scripts in the context of the affected website. This can lead to theft of user credentials, session hijacking, defacement, or redirection to malicious sites. Since the attack requires tricking a user into clicking a malicious link, it can compromise user trust and site integrity without requiring authentication. [2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking if your WordPress installation uses the Lesson Plan Book plugin version 1.3 or earlier. Since the vulnerability involves Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable, you can test for it by sending crafted HTTP requests with malicious scripts embedded in the URL path and observing if the script is reflected in the response without proper sanitization. For example, you can use curl to send a request with a payload in the URL path and inspect the response for script execution or reflected script tags. Example command: curl -v 'http://yourwordpresssite.com/lesson-plan-book/<script>alert(1)</script>' and check if the script tag appears unescaped in the response body. Additionally, scanning tools that detect reflected XSS vulnerabilities can be used against the affected pages that render the plugin's content. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include updating the Lesson Plan Book plugin to a version later than 1.3 where the vulnerability is fixed. If an update is not available, you can temporarily disable the plugin to prevent exploitation. Additionally, applying Web Application Firewall (WAF) rules to block malicious payloads targeting the $_SERVER['PHP_SELF'] parameter or reflected XSS attempts can help reduce risk. Educate users to avoid clicking suspicious links that could trigger the reflected XSS. Finally, monitor your site for unusual activity or signs of exploitation. [1]