VULNERABILITY INTELLIGENCE
CVE-2025-8282
CVSS score3.5 LOW
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-09-23
Last modified2026-10-11
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Description
The SureForms WordPress plugin before 1.9.1 does not sanitise and escape some parameters when outputing them in the page, which could allow admin and above users to perform Cross-Site Scripting attacks.