PT-2025-4576 · Unknown · Scanventory

Le Ngoc Anh · Publicado 2025-01-13 · Atualizado 2025-01-13 · CVE-2025-22588

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

The vulnerable software is Scanventory, specifically versions from n/a to 1.1.3. The vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which allows Reflected XSS attacks. This vulnerability is identified by the CVE-2025-22588 code. There is no information provided about a public exploit for this vulnerability or whether it has been exploited by attackers. The vulnerability can be exploited by sending malicious input to the web page generation process, which can lead to the execution of arbitrary code on the victim's browser. No information is available about the number of Internet users that can be affected by the exploitation of this vulnerability. CVE-2025-22588 #Scanventory #XSS #CrossSiteScripting #ReflectedXSS #ImproperNeutralization #InputValidation #WebPageGeneration #ScanventoryVulnerability #CVE202522588

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-22588

Produtos afetados

Scanventory

Referências · 6

• https://twitter.com/CVEnew/status/1878799449834553526 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-22588 · Nota de Segurança
• https://t.me/cvedetector/15140 · Publicação no Telegram
• https://patchstack.com/database/wordpress/plugin/woocommerce-inventory-management/vulnerability/wordpress-scanventory-plugin-1-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://twitter.com/VulmonFeeds/status/1878855130813972639 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/woocommerce-inventory-management/vulnerability/wordpress-scanventory-plugin-1-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota