PT-2026-1302 · Dokan Pro · Dokan Pro

CVE-2025-39497 · Publicado 2026-01-05 · Atualizado 2026-01-05

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dokan Pro versions through 3.14.5

Description A flaw exists in Dokan Pro that allows for Stored Cross-Site Scripting (XSS). This issue is due to improper neutralization of input during web page generation. An attacker could potentially inject malicious scripts into web pages viewed by other users. The affected product is susceptible to exploitation through the injection of scripts.

Recommendations Update Dokan Pro to a version newer than 3.14.5.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-39497

Produtos afetados

Dokan Pro

Referências · 6

• https://vdp.patchstack.com/database/wordpress/plugin/dokan-pro/vulnerability/wordpress-dokan-pro-plugin-3-14-5-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://t.me/CVEtracker/41396 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2008227017393643762 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-39497 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/dokan-pro/vulnerability/wordpress-dokan-pro-plugin-3-14-5-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/wordpress/plugin/dokan-pro/vulnerability/wordpress-dokan-pro-plugin-3-14-5-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota