PT-2025-36179 · Unknown · Ibnul H. Custom Team Manager

Bao - Bluerock · Publicado 2025-09-05 · Atualizado 2025-09-05 · CVE-2025-58840

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Ibnul H. Custom Team Manager versions through 2.4.2

Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS).

Recommendations Update Ibnul H. Custom Team Manager to a version later than 2.4.2.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-58840

Produtos afetados

Ibnul H. Custom Team Manager

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58840 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/custom-team-manager/vulnerability/wordpress-custom-team-manager-plugin-2-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1964008904221663664 · Publicação no Twitter
• https://patchstack.com/database/wordpress/plugin/custom-team-manager/vulnerability/wordpress-custom-team-manager-plugin-2-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota